Endpoint Protection

Hello everyone, we have SEPM 12.1.6 MP4 deployed with an emebdded datbabase installed on the DC ( which is not a best practice) supported about 400 agents. We are planning to upgrade the SEPM to 14 and to move it to a different dedicated server from the DC. In order to do that I have the below plan if my mind. I just wanted to have your expert opinion in my approach to make sure it is a seamless process.

1) Upgrade the SEPM 12.1.6 to SEPM 14 on the DC.

2) once upgrade is done, installed another SEPM on a different machine as a replication partner (Install the new SEPM with SQL database instead of embedded)

3) once replication has been completed sucuessfully. Create an MSL list to point the clients to the new SEPM.

4) once all the clients are moved to the new SEPM uninstall SEPM from the old DC.

5) Then install  a new SEPM  on a new server to an existing site running with SQL database so that we have two SEPMs as Primary and Secondary for Failover.

Does the above stretegy seems fine to you. The other thing I would like to confirm is we can configure replication between SEPM with embedded database and SEPM with SQL database, right?

Your comments are appreciated. Thanks 

Looks fine to me. Yes you can have replication between embedded and SQL database.

The following articles might be helpful

https://support.symantec.com/en_US/article.TECH236071.html

https://support.symantec.com/en_US/article.TECH171767.html

https://www.symantec.com/connect/articles/how-move-sepm-one-server-another-server << note - says v12 but it's very similar method.

Hope this helps.

Thanks Tony for your reply, in addition to the above outlined strategy is there anything that you would like to suggest for achieving the above requirements in a more seamless manner? Thanks

I can't think of anything else to add to this but obviously ensuring that all sites has a good link between them to ensure the defs are replicated, keeping all clients updated.