1. Symantec/
  2. Security Response/
  3. Security Updates Detail

Symantec Enterprise Security Manager - Symantec™ Enterprise Security Manager – 9.0.1 Update for Remote Upgrade of Windows Agent

October 18, 2010


Symantec™ Enterprise Security Manager – 9.0.1 Update for remote upgrade of Windows agent provides information about the fix for the issue observed when you try to perform a remote upgrade of an ESM 9.0.1 Windows agent to versions later than 9.0.1, from an ESM Manager. The remote upgrade fails.


Symantec Response


Symantec has released a Live Update package which consists of a module named “preru901” (prepare 9.0.1 for remote upgrade) to fix the issue for all the supported Windows agent platforms. When you deploy the Live Update package on the manager, it creates the “preru901” module. When you run the module on the agent through a new policy, it prepares the agent for remote upgrade. The Live Update package consists of packages of different Windows OS platforms.

Symantec recommends that if you want to remote upgrade ESM 9.0.1 Windows agents, then you must click on the following link to download the Live Update packages.


Live Update Packages.


Note: You must run the “preru901” module only on ESM 9.0.1 Windows agents.


Perform the following steps to implement the fix for Windows agents:

  1. Download the zip file to an appropriate location.
  2. Extract the downloaded file.
  3. Copy the contents to <Install dir>\Symantec ESM Enterprise Console\Liveupdate\granularlu\
    Note: You must back up the data that is present at <Install dir>\Symantec ESM Enterprise Console\Liveupdate\granularlu\ before you copy the extracted contents.
  4. Launch the ESM console.
  5. On the toolbar, click the Live Update icon.
  6. On the LiveUpdate wizard panel, select Directory path (CD, local or network path).
  7. You must ensure that  the path that you specify is up to the parent folder. The parent folder is the folder that contain the extracted Live update packages.
  8. Click Next.
  9. Select the check box of the manager that you want to use  to remote upgrade the 9.0.1 Windows agent.
  10. Connect to the manager after Live Update completes.
  11. In the treeview pane, right-click the Policies node, and then click New Policy.
  12. In the Create New Policy dialog box, enter a name for the new policy. Policy names can contain up to 29 characters and can also include special characters. You cannot leave a policy name blank.
  13. Add module “preru901” to the policy that you have created.
  14. Click OK.
  15. Run the policy on 9.0.1 Windows agents.


You can now remote upgrade 9.0.1 ESM agents of any Windows Platform to ESM versions later than 9.0.1.

Last modified on: October 18, 2010
Security Response Blog
The State of Spam