This article describes how to install LiveUpdate Administrator (LUA) for use as an internal LiveUpdate server.
LiveUpdate Administrator (LUA) provides the ability to deploy a stand-alone internal LiveUpdate server. The server can be customized to download all of the content needed to update a specific environment. It can also be configured to distribute that content to other stand-alone Hypertext Transfer Protocol (HTTP) File Transfer Protocol (FTP) or Windows File Sharing/Server Message Blocks (SMB) servers which clients can be configured to utilize for LiveUpdates.
LUA Best Practices
To ensure optimal results, read Best Practices for LiveUpdate Administrator (LUA) 2.x before installing LUA.
LUA System Requirements
Complete system requirements documentation for the latest version of LUA can be found in System Requirements for LiveUpdate Administrator 2.3 (LUA 2.3). A short summary is listed below.
The LUA installation package must be run by a member of the Administrators group. The user must be able to create new services. The latest version of LUA does not require the creation of any local users or groups, but legacy versions did.
By default, the following ports are used by Symantec LiveUpdate Administrator:
It is recommended to always use the latest-available release of LiveUpdate Administrator. Contact Symantec Technical Support to obtain this latest version of LUA. For more information, see How to obtain the latest version of Symantec LiveUpdate Administrator (LUA) 2.x.
- Execute the LUA installer package as a user with Administrator credentials.
- Click Next on the Welcome screen.
- Review and accept the license agreement on the License Agreement screen and click Next.
- Confirm the installation location and download updates location provided on the Destination Folder screen and click Next.
- Supply a username, password, password confirmation and email address on the User Setup screen and click Next.
- Click Install to complete the installation wizard and begin the installation process.
- After the installation process completes, click Finish to close the LUA installer.
- http://<IP address>:7070/lua
Note: localhost and 127.0.0.1 will only work on the local LUA computer itself. If LUA has been configured to use non-default ports for its Tomcat server, replace 7070 with the correct LUA Tomcat server port number.
To ensure successful download of large files, administrators may wish to tune their LUA server's connection settings. The Connect forum article LiveUpdate Administrator 2.x Server Connection Recommendations contains details on accomplishing this task.
Configuring Symantec LiveUpdate Administrator 2.x
This section contains instructions for common configuration tasks.
Update the Symantec Product Catalog
The first action taken should be to ensure that the LUA 2.x server's internal Symantec Product Catalog (SPC) is up-to-date.
- Select the Configure button in the menu bar.
- On the left pane in the My Symantec Products window, under My Symantec Products Tasks, click Update Symantec Product Catalog.
To add a product to the product list
- Select Configure in the menu bar.
- On the My Symantec Products window, click Add New Products.
- Select the name of the product that you want to add from the list.
- Click OK.
(If your Symantec product is not listed, you will need to update the Symantec Product Catalog.)
To delete a product from the product list
- On the My Symantec Products window, click the box next to the product that you want to delete from the product list.
- Click Delete Selected Products.
- Click Confirm Delete to delete the product.
To create a new download schedule
- On the Download & Distribute tab, in the Schedules window, click Add Download.
- In the Add Download Schedule box, enter the following:
- Distribution schedule name A descriptive name for this schedule.
- Status Enabled or Disabled
- Description Enter a description for this schedule.
- In the "Select Products" box, click Add.
- Select the products that you want to add to this schedule and then click Add.
- In the "Available Components" box, click the component you want to add, and then click Add. Or, click Add All to add all of the product components to the schedule.
- Select the test status that you want to assign to the schedule.
By default, the test status is set to Skip Test. Set the status to Must Test to test the updates before you publish them.
- In the Select Schedule box, set the download schedule.
- Click OK to save the schedule, or click Cancel to cancel this action.
- To run a manual download request that is based on an existing schedule. In the right pane, under Schedules, select an existing Download Schedule, and then click Run Now.
To run a new manual download request
- In the left pane, under Scheduling Tasks, click Manual Download Request.
- In the Manual Download Request - Step 1 of 2 window, select the products you want to add to this request by clicking Add.
- In the Select products to be added window, select the product or products you want to add and then click OK.
- Select the test status for this download request: Skip Test or Must Test.
- Click Next.
- In the Manual Download Request - Step 2 of 2 window, select the updates that you want to download. You can select all products and components, or you can select specific components such as Software Updates or Virus Definitions.
- Click Next to start the download request.
To delete a download schedule
- On the "Download & Distribute/Schedules" list, click the box next to the schedule that you want to delete
- Click Delete.
- Click Confirm Delete to finish deleting the schedule or click Cancel to cancel the deletion.
After you've downloaded your updates, they can be sent to either a testing distribution server, or published to a production distribution server where they can be downloaded by your LiveUpdate clients. When you add a distribution schedule, you also select the products and components that you want to associate with the schedule. This list of products and components is compared with the updates in the Manage Updates folder. Any revisions that are not already published will then be published in the current distribution session.
Note: The added products must also be added to the distribution center/s. This is accomplished through Configure > Distribution Centers, then edit an existing distribution center to add to the Product List.
To add a new distribution schedule
- On the Download & Distribute tab, in the Schedules window, click Add Distribution.
- In the Add Distribution Schedule box, enter the following:
- Distribution Schedule name
- Status, either Enabled or Disabled
- Select the products and components for which updates will be distributed by clicking Add.
- In the "Select products to be added" window, select the product or products you want to add to this distribution schedule, and then click Add.
- In the "Select Product Components" box, select the components that you want to include in the distribution schedule.
- Click the component name and click Add.
- Or select all components by clicking Add All.
- In the "Distribute Content To" box, select the distribution center type, Testing, Production, or both.
- Select the Distribution Centers. You can select all Distribution Centers, or a subset of the centers.
- Select a "distribution schedule."
- Click OK to save the schedule or click Cancel to cancel this action.
To run a manual distribution request based on an existing schedule
- In the right pane, under Schedules, select an existing Distribution Schedule, and then click Run Now.
To run a new manual distribution request
- In the left pane, under "Scheduling Tasks", click Manual Distribution Request.
- In the Manual Distribution Request Step 1 of 2 window, click Add to select the products that you want to distribution with this request.
- In the Select products to be added window, select the products or the components, then click OK.
- In the "Manual Distribution Request" Step 1 of 2 window, select the "Distribution Center Type": All, All Production Centers, or All Testing Centers.
- Select the Distribution Center: All, or Subset.
- Click Next.
- In the Manual Distribution Request Step 2 of 2 window, select the updates that you want to distribute, and then click Next.
- Configure Source Servers: By default, updates are downloaded from one of the LiveUpdate servers. However, you can identify and configure one or more local servers from which LUA can download updates, and designate servers that can be used in case they fail. To add a new source server, click the Configure tab, click Source Servers, and then click Add.
Note: If you are using Symantec Endpoint Protection 11.0, a source server has been pre-configured for Symantec Endpoint Protection 11.0 updates. If you configure a Download or Distribution schedule with Symantec Endpoint Protection 11.0 in the product list, then all available source servers will be searched for updates.
- Additional Distribution Centers: Configure the Distribution Centers that you want to use for publishing updates. By default, two Distribution Centers are created during installation of the LiveUpdate Administrator, a Testing Distribution Center and a Production Distribution Center. However, additional distribution centers may be added. Please see 'LiveUpdate Administrator 2.x installation walk through' for more details.
- Testing definitions: When updates have been tested, they can be then be marked as "passed" and then published to the production distribution center, using a schedule you have determined. You can create a list of products that are associated with the distribution center. All locations in the distribution center will be in sync with the product updates of products configured in the list. For example, if you would like to download only the virus definitions for all of your Symantec products, you can select the products, and then specify the Virus Definitions component.
- Client Settings Host File: For unmanaged SEP clients, export the client settings host file "Settings.Hosts.LiveUpdate." This is used to configure Windows LiveUpdate clients to download updates from the Distribution Center. The liveupdt.hst file is used by Java LiveUpdate clients (unmanaged SEP for Macintosh). To generate a host file:
- On the Configure tab, click Client Settings, and then select the Distribution Center that you want your LiveUpdate clients to use.
- Click Export Window Settings to export the Settings.Host.LiveUpdate file, or click Export Java Settings to create the Java LiveUpdate client file.
- Copy the file to \Program Files\Symantec\LiveUpdate directory on Windows client computers, or to \Library\Application Support\Symantec\LiveUpdate on Macintosh client computers. When the LiveUpdate client runs, it will use the host file for information on where to download updates.
Note: If you are using managed Symantec Endpoint Protection 11.0 clients, you can provide the LUA URL to Windows and Macintosh clients via the LiveUpdate policy in the Symantec Endpoint Protection Manager (SEPM).
For information on how to perform management tasks, see the Symantec LiveUpdate Administrator User's Guide.
Note: For specific information on downloading and serving content for Symantec Endpoint Protection for Macintosh clients, please see TECH103198.
Here are some additional resources on Connect which can help administrators and architects with LUA 2.x:
- LUA Installation and configuration
- Configuring Distribution Center in LUA
- LiveUpdate Administrator: Product Selection Guide
- LiveUpdate Administrator: How to configure a remote Distribution Center
- Illustrated Guide to Configuring LiveUpdate Administrator 2.x for SMSMSE 6.5.5
- Video: Install LUA (Live Update Administrator) and Configure for Symantec Endpoint Protection
- Video: LiveUpdate Administrator 2.3: What's New
- Video: LiveUpdate Administrator: How to configure a remote Distribution Center
Microsoft Windows Updates URL: http://www.update.microsoft.com/microsoftupdate/v6/muoptdefault.aspx?returnurl=http://www.update.microsoft.com/microsoftupdate&ln=en-us
To view/download Java Runtime Environment 5.0 release 13 go to URL: http://java.sun.com/javase/downloads/index_jdk5.jsp
This document is available in the following languages:
- Brazilian-Portuguese: http://www.symantec.com/business/support/index?page=content&id=TECH102701&locale=pt_BR#
- French: http://www.symantec.com/business/support/index?page=content&id=TECH102701&locale=fr_FR#
- German: http://www.symantec.com/business/support/index?page=content&id=TECH102701&locale=de_DE#
- Italian: http://www.symantec.com/business/support/index?page=content&id=TECH102701&locale=it_IT#
- Spanish: http://www.symantec.com/business/support/index?page=content&id=TECH102701&locale=es_ES#