How to create and deploy a Symantec Endpoint Protection install package using the Altiris Symantec Endpoint Protection Integration Component Solution
Last Updated January 21, 2015
The following instructions describe how to install a Symantec Endpoint Protection (SEP) install package using the Altiris Symantec Endpoint Protection Integration Component (SEPIC) in the Symantec Management Platform. Note: While the package can be deployed using other methods, such as through Software Delivery (SWD), the only official method of doing so is directly through SEPIC. If issues occur when using alternate methods, Symantec strongly recommends using the recommended method of using a SEPIC package instead.
Create an install file on the SEP server. Note: Step 1 requires SEP to be installed and configured. If SEP is not installed or the user does not have access to SEP, please contact the SEP administrator for further assistance.
a. In the Symantec Endpoint Protection Manager (SEPM) console, create an anti-virus install file (setup.exe). Note: This must be set to be Silent. SEPIC is not designed to work with the unattended installer, only the silent client installer. For more information, refer to the following article:
b. Copy the setup.exe file created by SEPM in Step 1a to the SMP server.
Create a SEPIC package:
a. On the SMP server, in the SMP Console, click on the Home button > Symantec Endpoint Protection Management. b. Click on Configure Endpoint Protection Packages. c. Click on the New button. d. Choose the bit type by changing the value of the "Symantec Endpoint Protection Package Type" dropdown field. e. Enter a name for the package in the Package Name field. f. Click on the Browse button and select the setup.exe file created in Step 1. g. Click on the Open button. h. Click on the OK button.
Deploy the package:
a. Still in the SMP Console under Symantec Endpoint Protection Management, click on Create Migration Job. b. Enter a name for the task in the Name field. c. Enter a description of the task in the Description field. Note: The task will also uninstall all older versions of SEP and certain non-Symantec anti-virus enterprise versions to migrate the client to the preferred version from the setup.exe file. d. Select the package created in Step 2 in the Package field. e. Select restart options as desired. f. Click on the OK button. This creates a new task that can be found under Manage > Jobs and Tasks > System Jobs and Tasks > Symantec Endpoint Protection Management > task_name (default is "Migrate computers to the latest Symantec Endpoint Protection Client). g. On the next SMP Agent check in, the task will fire and deploy/migrate the new setup.exe to the client for installation.
Troubleshooting the SEP install
If during the install, the SEP package fails to install, this is likely not caused by SEPIC. SEPIC, through the Task Server, sends the package to the client. At the time of install, the Setup.exe (SEP install file created by the SEPM Server) attempts to install. If this fails, try running this manually outside of being deployed by SEPIC. If manual installation also fails, the customer would next want to contact the Symantec Endpoint Protection technical support team for help with SEP, as SEPIC is not part of the SEP install process. If, however, the Setup.exe installs successfully, then there may be an issue with the deployment; continue troubleshooting SEPIC.