Endpoint Protection

 View Only
Back to discussions
Expand all | Collapse all

Can i clone VM'S with SEP installed?

  • 1.  Can i clone VM'S with SEP installed?

    Posted Dec 10, 2009 10:20 AM
    Hello,

    I want to clone several VM's, but i have SEP in managed mode installed in the original.
     Does the SEPM comunicate well with the VM Clones, or need to install in every machine the SEP??
    Thanks


  • 2.  RE: Can i clone VM'S with SEP installed?

    Posted Dec 10, 2009 10:36 AM
    I have not tested ,however i think it can be done
    if the client is able to communicate with the manager vm, it should be working.
    can you try on one single clone.I think it should work 


  • 3.  RE: Can i clone VM'S with SEP installed?

    Posted Dec 10, 2009 10:36 AM
    You will have to install SEP on the VM'S individually. Pick a clone image without managed SEP client installed.


  • 4.  RE: Can i clone VM'S with SEP installed?

    Posted Dec 10, 2009 10:44 AM
    Sandip - why? We ghost machines, physical machines, and as long as the correct registry keys are deleted, it recreates new ones and life is fine.
    Everything else is cloned on a VM server here and all works ok. I've not done SEP, but then we so RARELY use the templates to put out new machines, it's simply not been done yet.
    I guess at this point, I fail to see the difference between a Ghost image and a VM "image"............. as long as those keys are deleted and allowed to be recreated (and with RU5, that file mentioned in the KB as well)
    You have to prep the clone anyway with names and IP addressing, etc. - what's the diff, I'd ask?


  • 5.  RE: Can i clone VM'S with SEP installed?

    Posted Dec 10, 2009 10:48 AM
    We installed SEP on our VM server templates (although just to be safe, we did not let it connect to the SEPM).  Now when we create a VM image from the template, all is good and they check in perfectly.  Just had one as proof within the last 30 mintues.


  • 6.  RE: Can i clone VM'S with SEP installed?

    Posted Dec 10, 2009 11:03 AM
    That was my thought - it's really just like a Ghost image.
    You still prep the clone with machine name, etc. like a Ghost image.
    I see no reason for it to not work, IMO.


  • 7.  RE: Can i clone VM'S with SEP installed?

    Posted Dec 10, 2009 12:14 PM
     ShadowsPapa is right this is a commonly and widely used procedure that many follow and it works...

    Read this discussion for more info and details
    https://www-secure.symantec.com/connect/forums/imaging-rules-keep-changing


  • 8.  RE: Can i clone VM'S with SEP installed?

    Posted Dec 10, 2009 02:35 PM
    When I clone my VMs I always make sure to run newSID from Microsoft Sysinternals.

    The reason for this is that my machines are all on an Active Directory Domain and I sync my SEPM with AD (for some groups). 


  • 9.  RE: Can i clone VM'S with SEP installed?

    Posted Dec 10, 2009 02:37 PM
    Check out this forum discussion about the whole thing.  Several other links to articles and such in there as well...

    https://www-secure.symantec.com/connect/forums/question-about-deploying-sep-11-mr5-client-virtual-desktops-within-vmware-view-master-image


  • 10.  RE: Can i clone VM'S with SEP installed?

    Posted Dec 11, 2009 05:58 AM
    Hi people,

    Thanks all for the help.
    I was searching and discover this post from our friend Ghent .
    I think this is the knowledge we need.

     Changes to Hardware ID in RU5

    First of all, the HardwareID is no longer based on the MAC address.
    Second, the HardwareID is now stored on the disk under: %Program Files%\Common Files\Symantec Shared\HWID\sephwid.xml
    If you are cloning a machine, either physical or virtual, it's best to delete the hardware key before you clone the machine.
    Also, if you want machines to join a specific group inside the SEPM server, make sure the "PreferredGroup" registry keys is set to the group you want them to join. You can set this registry key manually, or depending on how you created your initial client install, it may be set already.
    Check out this article for more information.


  • 11.  RE: Can i clone VM'S with SEP installed?

    Posted Dec 11, 2009 06:23 AM
     Your Solution is not much clear can explain what " Changes in RU5 "