You may skip migration of legacy products as follows: Uninstall the legacy software from your computers. During Symantec Endpoint Protection Manager installation, cancel the migration option. After initial product installation, use Symantec Endpoint Protection Manager to adjust the group settings and policy settings, then deploy the Symantec Endpoint Protection client to the unprotected legacy computers.
Prepare Symantec Client Security or Symantec AntiVirus for migration
Prepare Symantec Client Security or Symantec AntiVirus for migration: Disable scheduled scans, disable LiveUpdate, turn off Tamper Protection, turn off Roaming, Unlock server groups, and uninstall/delete Reporting servers.
Migrate legacy group and policy settings using the Migration Wizard into an existing Symantec Endpoint Protection Manager (Start menu->Symantec Endpoint Protection Manager->Symantec Endpoint Protection Manager Tools->Migration Wizard).
Verify migrated data.
Import legacy license.
Upgrade the Endpoint Protection Manager (if necessary), then deploy Endpoint Protection to legacy clients (see sections below).
Upgrade the Symantec Endpoint Protection Manager
Back up the database.
Turn off replication.
If you have Symantec Network Access Control installed, enable local authentication.
If the setting "Protect client files and registry keys" is used, disable it from your Application and Device Control policy prior to the migration. WARNING: if this setting is not disabled you may face issues at a later stage when migrating your clients.
Stop the Symantec Endpoint Protection Manager service on every management server in your site. After you upgrade, the service starts automatically. WARNING: If you do not stop the Symantec Endpoint Protection Manager service before you upgrade the server, you risk corrupting your existing Symantec Endpoint Protection database. NOTE: When you stop the management server service, clients can no longer connect to it. If clients are required to communicate with the management server to connect to the network, they are denied access until the management server service is restarted.
Upgrade the Symantec Endpoint Protection Manager software. You must migrate all management servers before you migrate any clients. You are not required to restart the computer after migration, but you may notice performance improvements if you do. To migrate Symantec Sygate Enterprise Protection servers that use Host Integrity Policies or Enforcer protection, install the management server for Symantec Endpoint Protection first. Then, you repeat the installation procedure and install the management server for Symantec Network Access Control to gain access to the Host Integrity and Enforcer functionality
Turn on replication after all Managers are upgraded.
Manage product licenses
Symantec Endpoint Protection 12.1 is licensed according to the number of Endpoint Protection clients that are needed to protect the endpoints at your site. Once the Symantec Endpoint Protection Manager is installed, you may immediately deploy clients. New Manager installations come with a trial license: you have 60 days to purchase and activate a license that covers all of your deployed clients. When migrating from an older version of Symantec Endpoint Protection (versions 11.x or 12.0), you start with an upgrade license that expires in 241 days. Note: Small Business Edition comes with a 30-day trial license, whether it is an upgrade or new installation.
In the Symantec Endpoint Protection Manager console, click Admin, and then click Licenses.
Under Tasks, click Activate license.
Follow the instructions in the License Activation Wizard to complete the activation process.
Upgrade client software
NOTE: Clients that are Group Update Providers must be upgraded first (Group Update Providers are not a feature of Small Business Edition).
• AutoUpgrade*--assign client packages to groups in the Manager console, either manually or by using the Upgrade Groups Wizard. Be sure that the SEPM is the same language as the package you are pushing and the client as this may cause AutoUpgrade to fail.
• Permit product updates in LiveUpdate Settings policy for a client group in the Manager console.*
• Local installation from product disc.
• Run the Client Deployment Wizard from the Manager console. It will walk you through the creation of a client package that can be deployed via a weblink and email, remote push, or saved for later local installation or deployment using third-party tools.
• For Symantec Endpoint Protection 12.1 Small Business Edition only, untick the check box "disable automatic client package updates". The function can be found in the SEPM SBE under Computers> right click on any group> properties.
* Methods marked with an asterisk are not available in Small Business Edition.
Imported Document ID: TECH163602
Subscribing will provide email updates when this Article is updated. Login is required.