1. /
  2. Security Response/
  3. Security Updates Detail

Symantec Enterprise Security Manager - Symantec™ Enterprise Security Manager – Update of ESM 9.0.1 remote upgrade package

February 28, 2011

Description

Overview

 Symantec™ Enterprise Security Manager – Update for Remote upgrade of ESM 9.0.1 agents, provides update for remote upgrade of ESM agents of version earlier than 9.0.1 to ESM 9.0.1. This update also provides support for remote upgrade of agents on Windows 7 and Windows 2008 R2.
Symantec Response 

Symantec has released the update which consists of the Complete RU (Remote Upgrade) package that is used to remote upgrade agents to ESM 9.0.1. The update also consists of ESM manager binaries, which are applicable to ESM 9.0.1 and ESM 10.0 managers.

 

Note: You must replace the ESM manager binaries, before you apply the remote upgrade fix using the remote upgrade process.

 

This fix is applicable to the following platforms:

  • Windows 2000 Professional, Advanced, and Server (Intel) 
  • Windows Server 2003 (EM64T/Opteron) 
  • Windows Server 2003 (Intel) 
  • Windows Server 2003 (Itanium) 
  • Windows Server 2008 (EM64T/Opteron), Core and GUI 
  • Windows 2008 (x86) GUI 
  • Windows 2008 R2 (x64, IA64) Core and GUI 
  • Windows 7 (x86, x64) 

 

To apply the fix on agents of version earlier than ESM 9.0.1, that are to be upgraded to ESM 9.0.1

 

Follow the steps given below to apply the fix:

  1. Replace the following files on ESM Manager:
  1. Download the zip file from the following link:
    For ESM 9.0.1 Manager:
    http://www.symantec.com/avcenter/security/ESM/PU/ESM901/Windows/Windows.zip
    For ESM 10.0 Manager:
    http://www.symantec.com/avcenter/security/ESM/PU/ESM10/Windows/Windows.zip
  2. Stop the Symantec Enterprise Security Manager Service from the services console.
  3. Take a backup of the existing ESM Manager binary i.e. esmmangner.exe and version.dat,  that is present at
    <Install_dir>\Symantec\ESM\bin\<platform_dir>
    Note: You do not have to replace version.dat on ESM 10.0 manager.
  4. Navigate to the <Install_dir>.
    By default the install_dir is located at: C:\Program Files\Symantec\Enterprise Security Manager\bin\<platform>.
  5. Replace the esmmanager.exe and version.dat with the files extracted in step a.
    Note: You do not have to replace version.dat on ESM 10.0 manager.
  6. Restart the Enterprise Security Manager Service.

 

To replace the ESM Manager binary on UNIX, do the following:

  1. Extract the following files to a suitable location on your local computer:
    - esmcifd
    - esmnetd
    - version.dat
    Note: You do not have to extract version.dat for ESM 10.0 manager.
  2. Stop the ESM daemons by typing the following command:
    /esm/esmrc stop
  3. Take a backup of the files mentioned in step a above from the following location:
    /esm/bin/<platform>/
  4. Replace the existing files with the files extracted in step a.
  5. Change the permission of the files you replaced in step e to be executable.
    Type the following command:
    chmod +x esmcifd
    chmod +x esmnetd
    chmod +x version.dat
    Note: You do not have to change permission of version.dat for ESM 10.0 manager.
  6. Start the ESM daemons by typing the following command:
    /esm/esmrc start
* Signature names may have been updated to comply with an updated IPS Signature naming convention. See http://www.symantec.com/business/support/index?page=content&id=TECH152794&key=54619&actp=LIST for more information.
Last modified on: February 28, 2011
Security Response Blog
The State of Spam