Data Loss Prevention

Hello,

In this article I have created an automation script allowing users to automate either the EnforceMigrator.exe or the SingleTierMigrator.exe process following an upgrade from 14.6 to 15.1.

As part of the upgrade process of Data Loss Prevention following the installations and URT processes you're required to run an executable which starts the new services, stops the old services and migrates your policies and existing data into the new instance of DLP.

The reasoning for this is migrating from 14.6 to 15.1 is actually classed as a clean install due to directory changes and service name changes between the 2 products.

The script created will automatically run the executable via an elevated Powershell window, select the DLP instance to upgrade and run through the process.

cd 'D:\Program Files\Symantec\Data Loss Prevention\Single Tier Server\15.1\Protect\Migrator'
SingleTierServerMigrationUtility.exe -silent -sourceInstallation="D:\SymantecDLP"

The script itself is very simplistic but will need to be amended based on your environment, the above script is looking at the SingleTierServerMigrationUtility.exe for example, if your not using a single tier installation, you will need to amend this to EnforceServerMigrationUtility.exe.

My DLP Instance is also installed on D:\ opposed to C:\ so this may need to be changed also to the relevant 'Migrator' folder; again this is different for single tier and 2/3 tier setups,

As a general rule the enforce migrator executable is located here C:\Program Files\Symantec\Data Loss Prevention\Enforce Server\15.1\Protect\Migrator

You simply need to make the amendments to the script and can run this via powershell without any required interaction.

I hope this proves useful,