at the end of this lab, understand how to migrate sep 11.x...
TRANSCRIPT
L07-Lab Guide.
Description
Migrating to Symantec Endpoint Protection (SEP)? Want to
upgrade to the latest SEP technology? In this Lab, see how to
upgrade a multi-site Symantec Endpoint Protection environment.
You will learn how to deploy the latest technologies and
seamlessly migrate clients to SEP 12.1
At the end of this lab,
you should be able to
Understand how to Migrate SEP 11.x SEPMs to SEP
12.1
Understand how to Migrate SEP 11.x Clients to SEP
12.1
Notes
A brief presentation will introduce this lab session and
discuss key concepts.
The lab will be directed and provide you with step-by-step
walkthroughs of key features.
Feel free to follow the lab using the instructions on the
following pages. You can optionally perform this lab at
your own pace.
Be sure to ask your instructor any questions you may
have.
Thank you for coming to our lab session.
L-06 Lab Guide – Migrating to SEP 12.1
2 of 50
TABLE OF CONTENTS
L06-MIGRATING TO SEP 12.1 1
EXERCISE 1: BACKUP SITE DATABASE (OPTIONAL) 3
EXERCISE 2: DISABLE REPLICATION 6
EXERCISE 3: STOP THE SYMANTEC ENDPOINT PROTECTION MANAGER SERVICE 10
EXERCISE 4: UPGRADE 1ST SEP MANAGER (SITE 1) 11
EXERCISE 5: UPGRADE 2ND SEP MANAGER (SITE 1) 21
Exercise 5: Upgrade 2nd SEP Manager 21
EXERCISE 6 & 7: UPGRADE 3RD SEP MANAGER (SITE 2) 27
Exercise 6: Stop the Symantec Endpoint Protection Manager service 27
Exercise 7: Upgrade 3rd SEP Manager 29
EXERCISE 8 & 9: RE-ESTABLISH REPLICATION 38
Exercise 8: Re-Establish Replication (Site 1) 38
Exercise 9: Re-Establish Replication (Site 2) 45
EXERCISE 10: DEPLOYING SEP 12.1 CLIENTS (OPTIONAL) 48
Step 1: Navigate to the Client Group 48
Step 2: Select the Add a Client Install Package 48
Step 3: Select the Package to Deploy 49
Step 4: Optional Parameters 50
L-06 Lab Guide – Migrating to SEP 12.1
3 of 50
Exercise 1: Backup Site Database (Optional)
For this lab it is recommended that you skip Exercise 1 to give yourself time to
complete the full lab.
Before migrating to SEP 12.1, administrators should back up the existing database.
This Exercise take an estimated 10 minutes to Complete
Step 1: Log on to SEPM Console (SEPM1)
Username: admin
Password: symantec
Step 2: Navigate to the Servers Menu under the Admin Tab
Click the admin icon on the Left Menu Pane
L-06 Lab Guide – Migrating to SEP 12.1
4 of 50
Click Servers
Click on the DB Server under the View Servers tab.
Note: It will be listed as the 2nd SEPM1
L-06 Lab Guide – Migrating to SEP 12.1
5 of 50
Step 3: Edit Backup Settings
Under Tasks, select Edit Backup Settings
Step 4: Change Backup Server
Change the Backup Server to SEPM2, and select OK
L-06 Lab Guide – Migrating to SEP 12.1
6 of 50
Step 5: Start the Backup
Click the Back Up Site Now task
Step 6: Verify Backup has completed
After the Backup has completed, the console should display a successful backup has
completed.
Exercise 2: Disable Replication
If your site uses replication, you must disable replication before upgrading Symantec
Endpoint Protection Manager. You must disable replication at each site that replicates.
Step 1: Log on to SEPM Console on SEPM1
Username: admin
Password: symantec
L-06 Lab Guide – Migrating to SEP 12.1
7 of 50
Step 2: Navigate to the Servers Menu under the Admin Tab
Click the admin icon on the Left Menu Pane
Click Servers
L-06 Lab Guide – Migrating to SEP 12.1
8 of 50
Step 3: Navigate to Replication Partners
On the View Servers menu, expand the Local Site, and then Expand Replication Partners
Step 4: Delete each Replication Partner
Repeat these steps until all replication partners are removed
L-06 Lab Guide – Migrating to SEP 12.1
9 of 50
Step 5: Delete Replication Partners in Every Site
Repeat Steps 1-4 for Site 2 (SEPM3)
L-06 Lab Guide – Migrating to SEP 12.1
10 of 50
Exercise 3: Stop the Symantec Endpoint Protection Manager
service
Before you upgrade, you must manually stop the Symantec Endpoint Protection
Manager service on every management server in your site. After you upgrade, the
service is started automatically.
Step 1: On SEPM1, Open the Windows Services Management Tool
On the Windows Start Menu, Click All Programs, Administrative Tools, Services
Step 2: Stop the Symantec Endpoint Protection Manager Service
Scroll down to find the SEPM Service. Select the "Symantec Endpoint Protection
Manager" Service, then Select the Stop Service option.
L-06 Lab Guide – Migrating to SEP 12.1
11 of 50
The Service Status should now reflect the service not running.
Step 3: Repeat Steps 1 & 2 on each SEPM in SITE 1
Repeat Steps 1 and 2 on computer, SEPM2
Exercise 4: Upgrade 1st SEP Manager (Site 1)
Complete Exercise 4 on Server, SEPM1
Step 1: Locate SEP 12.1 Install Media
On the Desktop, Open the SEP 12.1 RU1 Media folder
L-06 Lab Guide – Migrating to SEP 12.1
12 of 50
Step 2: Open the SEPM Folder
Step 3: Run the SEPM Setup
L-06 Lab Guide – Migrating to SEP 12.1
13 of 50
Step 4: Install SEPM
Click Next
Click Next
Step 5: Accept License Agreement
Select "I Accept the terms in the License agreement" Option, and select next
L-06 Lab Guide – Migrating to SEP 12.1
14 of 50
Step 6: Supply the DB Credentials
Use the following Credentials:
Username: sa
Password: Symc4now!
Then Select, Next
L-06 Lab Guide – Migrating to SEP 12.1
15 of 50
Select Install
Step 7: Management Server and Console Installation Summary
Click Next
L-06 Lab Guide – Migrating to SEP 12.1
16 of 50
Step 8: Upgrade Wizard
Click Next
Step 9: Additional Port Settings
Click Next
L-06 Lab Guide – Migrating to SEP 12.1
17 of 50
Step 10: Additional DB Options
Click Next
Step 11: Data Collection
Click Next
L-06 Lab Guide – Migrating to SEP 12.1
18 of 50
This Step will take Approximately 3-7 Minutes to complete
Once the Upgrade has Succeeded, Select Next
L-06 Lab Guide – Migrating to SEP 12.1
19 of 50
Step 12: Upgrade is Complete
Click Finish
L-06 Lab Guide – Migrating to SEP 12.1
20 of 50
Step 13: Verify SEPM Upgrade has completed
Log On to the SEPM Console using the following credentials:
Username: admin
Password: symantec
L-06 Lab Guide – Migrating to SEP 12.1
21 of 50
Exercise 5: Upgrade 2nd SEP Manager (Site 1)
Exercise 5: Upgrade 2nd SEP Manager
Step 1: Locate SEP 12.1 Install Media on SEPM2
On the Desktop, Open the SEP 12.1 RU1 Media folder
Step 2: Open the SEPM Folder
L-06 Lab Guide – Migrating to SEP 12.1
22 of 50
Step 3: Run the SEPM Setup
Step 4: Install SEPM
L-06 Lab Guide – Migrating to SEP 12.1
23 of 50
Click Next
Click Next
Step 5: Accept License Agreement
L-06 Lab Guide – Migrating to SEP 12.1
24 of 50
Select "I Accept the terms in the License agreement" Option, and select next
Step 6: Install the Manager
Click Install
L-06 Lab Guide – Migrating to SEP 12.1
25 of 50
Click Next
Step 7: Upgrade Wizard
Click Next
Step 8: Additional Port Setup
L-06 Lab Guide – Migrating to SEP 12.1
26 of 50
Click Next
Step 9: Server Upgrade Complete
Select Next
Click Finish
L-06 Lab Guide – Migrating to SEP 12.1
27 of 50
Step 10: Verify SEPM Upgrade has completed
Log On to the SEPM Console using the following credentials:
Username: admin
Password: symantec
Exercise 6 & 7: Upgrade 3rd SEP Manager (Site 2)
Exercise 6: Stop the Symantec Endpoint Protection Manager service
Before you upgrade, you must manually stop the Symantec Endpoint Protection
Manager service on every management server in your site. After you upgrade, the
service is started automatically.
L-06 Lab Guide – Migrating to SEP 12.1
28 of 50
Step 1: On SEPM3, Open the Windows Services Management Tool
On the Windows Start Menu, Click All Programs, Administrative Tools, Services
Step 2: Stop the Symantec Endpoint Protection Manager Service
Scroll down to find the SEPM Service. Select the "Symantec Endpoint Protection
Manager" Service, then Select the Stop Service option.
L-06 Lab Guide – Migrating to SEP 12.1
29 of 50
The Service Status should now reflect the service not running.
Exercise 7: Upgrade 3rd SEP Manager
Step 1: Locate SEP 12.1 Install Media on SEPM3
On the Desktop, Open the SEP 12.1 RU1 Media folder
L-06 Lab Guide – Migrating to SEP 12.1
30 of 50
Step 2: Open the SEPM Folder
Step 3: Run the SEPM Setup
L-06 Lab Guide – Migrating to SEP 12.1
31 of 50
Step 4: Install SEPM
Click Next
NOTE: If you encounter a Low Disk Space Error, the contents of the folder "c:\Program
Files (x86)\Symantec\Symantec Endpoint Protection Manager\Inetpub\Content" can be
erased and the install can be attempted again. The contents of this folder will be
recreated after the SEPM Starts.
L-06 Lab Guide – Migrating to SEP 12.1
32 of 50
Click Next
Step 5: Accept License Agreement
Select "I Accept the terms in the License agreement" Option, and select next
L-06 Lab Guide – Migrating to SEP 12.1
33 of 50
Select Next
Step 6: Install the Manager
Click Install
L-06 Lab Guide – Migrating to SEP 12.1
34 of 50
Click Next
Step 7: Upgrade Wizard
Click Next
L-06 Lab Guide – Migrating to SEP 12.1
35 of 50
Step 8: Additional Port Setup
Click Next
Click Next
L-06 Lab Guide – Migrating to SEP 12.1
36 of 50
Click Next
Step 9: Server Upgrade Complete
Select Next
L-06 Lab Guide – Migrating to SEP 12.1
37 of 50
Click Finish
Step 10: Verify SEPM Upgrade has completed
Log On to the SEPM Console using the following credentials:
L-06 Lab Guide – Migrating to SEP 12.1
38 of 50
Username: admin
Password: symantec
Exercise 8 & 9: Re-Establish Replication
Exercise 8: Re-Establish Replication (Site 1)
Step 1: Log on to SEPM Console on SEPM1
Username: admin
Password: symantec
L-06 Lab Guide – Migrating to SEP 12.1
39 of 50
Step 2: Navigate to the Servers Menu under the Admin Tab
Click the admin icon on the Left Menu Pane
Click Servers
L-06 Lab Guide – Migrating to SEP 12.1
40 of 50
Step 3: Add Replication Partner
Select Local Site. From the Tasks Menu, select Add Existing Replication Partner
L-06 Lab Guide – Migrating to SEP 12.1
41 of 50
Select Next
Step 4: Specify Existing Site Information
L-06 Lab Guide – Migrating to SEP 12.1
42 of 50
Use the following information:
Remote Server IP Address or NAme: SEPM3
Remote Port Number: 8443
Name: admin
Password: symantec
Select Next
Step 5: Configure Replication Schedule
Click Next
L-06 Lab Guide – Migrating to SEP 12.1
43 of 50
Step 6: Configure What Data to Replicate
Uncheck “Replicate client packages” and Clieck Next
Click No
L-06 Lab Guide – Migrating to SEP 12.1
44 of 50
Step 7: Finshed
Click Finish
L-06 Lab Guide – Migrating to SEP 12.1
45 of 50
Exercise 9: Re-Establish Replication (Site 2)
Step 1: Log on to SEPM Console on SEPM3
Username: admin
Password: symantec
L-06 Lab Guide – Migrating to SEP 12.1
46 of 50
Step 2: Navigate to the Servers Menu under the Admin Tab
Click the admin icon on the Left Menu Pane, Then Select Servers on the Sub-Menu Pane
Click Servers
L-06 Lab Guide – Migrating to SEP 12.1
47 of 50
Step 3: Verify Replication Partner has been added
Select Local Site. Verify Site 1 Replication Partner has been added.
L-06 Lab Guide – Migrating to SEP 12.1
48 of 50
Exercise 10: Deploying SEP 12.1 Clients (Optional)
Step 1: Navigate to the Client Group
In the SEPM Console, navigate to the group that contains the clients you wish to
upgrade, and select the Install Packages Tab.
Step 2: Select the Add a Client Install Package
Under the tasks menu, click on the Add a Client Install Package
L-06 Lab Guide – Migrating to SEP 12.1
49 of 50
Step 3: Select the Package to Deploy
Select the Drop Down Menu
Select the SEP version 12.1.1000.157 for WIN64BIT package
L-06 Lab Guide – Migrating to SEP 12.1
50 of 50
Step 4: Optional Parameters
Specify any optional parameters including:
Times of Day to Deploy, Download Source, Notifications
Click Ok
Note: Now that the package has been assigned, the client will upgrade on the next
heartbeat or next heartbeat in the defined upgrade schedule window.
END OF EXERCISE.
Thanks for following this lab session. We hope it was useful, do not forget to fill out the
survey as indicated by the trainers.