This article goes over the general requirements for configuring Symantec Endpoint Encryption prerequisites, however, an easy way to check on the SEE Management Server prerequisites is to run the SymDiag application, which will detect all the missing prerequisites. 

CRITICAL TIP! Symantec Encryption Support has a very useful tool that will both detect **and install** these prerequisites automatically (Check Roles Tool).  To obtain this tool, please contact Symantec Enterprise Support and we will be happy to provide this tool to make the SEE Management Server easy for you to install.  Also, be sure to check out the product documentation for these encryption solutions.

Symantec Enterprise Division encourages you to be sure you're on the latest version of our Symantec products.  For the current version, see the following article:

156303 - Symantec Encryption Products Current Version Available

Enabling the prerequisite server roles, features, and tools for the Symantec Endpoint Encryption Management Server
You must enable the prerequisite server roles, features, and tools to install Symantec Endpoint Encryption. Do not attempt to install until you complete the steps in this
topic.

On Microsoft Windows Server 2012
To enable the Web service (IIS) role on a Microsoft Windows 2012 Server:

1. Go to Start > Programs > Administrative Tools > Server Manager.
2. In the Dashboard, click Add roles and features.
3. In the Add Roles and Features Wizard, click Next.
4. In the Installation Type page, click Role-based or feature-based installation and then click Next.
5. In the Server Selection page, make the selection that matches your environment and then choose your server and click Next.
6. In the Server Roles page, select Web Server (IIS).
7. In the Add Roles and Features Wizard window, click Include management tools and then click Add Features.
8. Click Next.
9. In the Features page, expand .NET Framework 4.5 Features and check .NET Framework 4.5 and ASP.NET 4.5.
10. In the Features page, check Group Policy Management.
11. In the Features page, expand Remote Server Administration Tools > Role Administration Tools and check AD DS and AD LDS Tools.
12. Click Next.
13. In the Web Server Role (IIS) page, click Next.
14. In the Role Services page, expand Web Server > Security and select Basic Authentication and Windows Authentication.
15. In the Role Services page, expand Web Server > Application Development and check the following:
    • .NET Extensibility 4.5
    •  ASP .NET 4.5
    •  ISAPI Extensions
    •  ISAPI Filters 
16. In the Role Services page, expand Management Tools and check the following
    •  IIS Management Console
    •  IIS 6 Management Compatibility (check all four entries)
    •  IIS Management Scripts and Tools
17. Click Next.
18. In the Confirmation page, click Install.
19. In the Results page, click Close.

On Microsoft Windows Server 2008
To enable the web server (IIS) server role and role services on Microsoft Windows Server 2008:

1. Click Start > Administrative Tools > Server Manager.
2. In the left pane of the Server Manager snap-in, right-click Roles and click Add roles.
3. On the welcome page of the Add Roles Wizard, click Next.
4. On the Select Server Roles page, select Web Server (IIS).
5. Click Next and then click Next again.
6. On the Select Role Services page, go to Web Server > Application Development and click ASP.NET.
7. On the Add role services and features required for ASP.NET dialog box, click Add Required Role Services. Selecting this option also automatically selects .NET Extensibility, ISAPI Extensions, and ISAPI Filters.
8. Expand the Security option and then click Basic Authentication and Window Authentication.
9. Expand Management Tools and check IIS Management Scripts and Tools. Check IIS 6 Management Compatibility. *Make sure all the components under Management Compatibility are also checked.
10. Click Next and then click Install.
11. After the Add Roles Wizard indicates that the installation is successful, click Close.
12. In the left pane of the Server Manager snap-in, right-click Features and click Add features.
13. In the Select Features window, select .NET Framework 4.5 features.
14. Select Group Policy Management.
15. Expand Remote Server Administration Tools > Role Administration Tools and select AD DS and AD LDS Tools.
16. Click Next and then click Install.
17. After the Add Roles Wizard indicates that the installation is successful, click Close.

On Microsoft Windows Server 2016 
To  enable  the  Web  service  (IIS)  role  on  a  Microsoft  Windows  2016  Server:

1. Click Start > Administrative Tools > Server Manager.
2. In the  Dashboard, click  Add roles and features.
3. In the  Add  Roles  and  Features  Wizard, click  Next.
4. In the  Installation  Type  page, click  Role-based or feature-based installation  and then click  Next.
5. In the  Server Selection  page, make the selection that matches your environment and then choose your server and click  Next.
6. In the  Server Roles  page, select  Web  Server  (IIS).
7. In the  Add  Roles  and  Features  Wizard  window,  click  Include management tools  and then click  Add Features.
8. Click   Next.
9. In the  Features  page, expand  .NET Framework 4.6 Features  and check  .NET Framework 4.6  and  ASP.NET  4.6.
10. In the  Features  page, check  Group Policy Management.
11. In the  Features  page, expand  Remote  Server  Administration  Tools  >  Role  Administration  Tools  and check  AD DS and  AD LDS Tools.
12. Click Next.
13. In the  Web  Server  Role  (IIS)  page, click  Next.
14. In the  Role Services  page, expand  Web  Server  >  Security  and select  Basic Authentication  and  Windows Authentication.
15. In the  Role Services  page, expand  Web  Server  >  Application  Development  and check the following:

         • .NET Extensibility 4.6

         • ASP .NET 4.6

         • ISAPI Extensions

         • ISAPI Filters

    16. In the  Role Services  page, expand  Management  Tools  and check the following:

         • IIS Management Console

         • IIS 6 Management Compatibility  (check all four entries)

         • IIS  Management  Scripts  and  Tools

    17. Click  Next.
    18. In the  Confirmation  page, click  Install.
    19. In the  Results page, click  Close.

On Microsoft Windows Server 2019 
To  enable  the  Web  service  (IIS)  role  on  a  Microsoft  Windows  2019  Server:

1. Click Start > Administrative Tools > Server Manager.
2. In the  Dashboard, click  Add roles and features.
3. In the  Add  Roles  and  Features  Wizard, click  Next.
4. In the  Installation  Type  page, click  Role-based or feature-based installation  and then click  Next.
5. In the  Server Selection  page, make the selection that matches your environment and then choose your server and click  Next.
6. In the  Server Roles  page, select  Web  Server  (IIS).
7. In the  Add  Roles  and  Features  Wizard  window,  click  Include management tools  and then click  Add Features.
8. Click   Next.
9. In the  Features  page, expand  .NET Framework 4.7 Features  and check  .NET Framework 4.7  and  ASP.NET  4.7.
10. In the  Features  page, check  Group Policy Management.
11. In the  Features  page, expand  Remote  Server  Administration  Tools  >  Role  Administration  Tools  and check  AD DS and  AD LDS Tools.
12. Click Next.
13. In the  Web  Server  Role  (IIS)  page, click  Next.
14. In the  Role Services  page, expand  Web  Server  >  Security  and select  Basic Authentication  and  Windows Authentication.
15. In the  Role Services  page, expand  Web  Server  >  Application  Development  and check the following:

         • .NET Extensibility 4.7

         • ASP .NET 4.7

         • ISAPI Extensions

         • ISAPI Filters

   16. In the  Role Services  page, expand  Management  Tools  and check the following:

         • IIS Management Console

         • IIS 6 Management Compatibility  (check all four entries)

         • IIS  Management  Scripts  and  Tools

    17. Click  Next.
    18. In the  Confirmation  page, click  Install.
    19. In the  Results page, click  Close.