After you create the Windows installation package, install the SEP Cloud client directly on a Windows device, or distribute the package through a software deployment system, such as Symantec IT Management Suite or use an Active Directory GPO.
Perform the steps on a Windows desktop, laptop, tablet, or a server.
To create a Windows installation package
Sign in to SEP Cloud and do one of the following:
On the Groups, Users, and Devices page, select the plus icon, and then select Download Installation Package.
Go to Settings > SEP Cloud Installation Package page.
On the Windows Installation Package page, the Package inclusions field displays the client and the server license details that are included in an installation package. You can use the same package for enrolling a Windows desktop, laptops, tablets, or servers.
On the SEP Cloud Installation Package page, use the Add to group > Change Group option to select a group other than the default group. All devices are added to the group you select.
Press Download Package Creator to fetch a helper file.
The helper file name is shown as "SEP_cloud_package".
Run the helper file and do one of the following:
If you want to use the default folder location to extract the redistributable Windows installation package, click Create Package.
The default folder location is "C:\Users\Public\Downloads\Symantec".
Click Change location to specify a new folder location where you want to extract the redistributable Windows installation package, and click Create Package.
If a package file already exists in the location you specified, the package is overwritten.
Alternately, you can use the command-line switches to extract a Windows client or server installation package.
When you finish creating the installation package, click the link that is displayed to open the folder location that contains the package.
Go to the folder location, and select either the "SEPC_install.exe" file or the "SEPCDeployment.msi", and the "SEPCDeployment.mst" files, depending on how you want to install the package.
Command-line switches to extract a Windows installation package
You can use the following command-line switches to extract a Windows installation package:
Table: Command-line switches
/extract_path "full path"
Lets you override the default location to extract the installation package. You must specify the exact path to which the redistributable package should be extracted.
Lets you hide the user interface that is displayed during the package extraction process. It is used to extract the package in an unattended mode. If you use these two switches without using the "/extract_path" switch, the default extraction path "<Public downloads>\Symantec" is used for package extraction.
For example, to extract a redistributable Windows client package, you can run the following command:
Installing the SEP Cloud client on Windows devices
With the installation package, you can install the security client directly on a device or use an Active Directory GPO. You can also install the package with Symantec IT Management Suite. To learn more about installing software with IT Management Suite, see the Symantec Software Management Solution product landing page.
To install the client directly on the device
Put the package on a network share, USB device, or other share mechanism.
Transfer the package to the device and then run SEPC_install.exe. This command automatically includes the installer and provides the information that the client needs to communicate with your environment.
To install the client by pushing an Active Directory GPO
Put the package on a network share.
In Group Policy Object Editor, go to the Computer Settings node and create a new Software Installation Package.
For more information about GPO policy, refer to the following Microsoft article:
Select the "SEPCDeployment.msi" file, and go to the Modifications tab.
You have only this opportunity to apply a Transform to the Package.
In the Modifications tab, click Add and select the "SEPCDeployment.mst" file.
In addition to the ".msi" file, you also require the ".mst" file to deliver the security client using GPO. The .mst file includes the tokens that must be passed to connect the security client to SEP Cloud.
Select Deployment type.
The supported methods are:
Assigned, which lets the installation package install automatically.
Published, which makes the package available for installation in Control Panel >Add or Remove Programs.