liveupdate.conf usually mirrors LiveUpdate settings from the Symantec Endpoint Protection Manager. In unmanaged SEP environments, however, liveupdate.conf may require hand-editing. This is normally done with the Java LiveUpdate ConfEditor GUI. But in CLI-only environments (command line interface, no graphical Linux desktop installed), editing the conf file directly is not possible because it is encrypted.
In these cases, liveupdate.conf may be replaced with a plaintext file and custom settings, and the next time LiveUpdate runs it will be encrypted again.
This article provides the default contents of liveupdate.conf, which can be saved as liveupdate.txt, edited, and copied over liveupdate.conf. The txt file should be retained as a record and starting point for future edits.
NOTE: use a Linux-based editor, or take care to save liveupdate.conf with Linux line-endings. Windows line-endings will cause confusing errors.
Default contents of liveupdate.conf as of SEP 12.1 RU5:
In environments where there is an LUA server and no access to Symantec LiveUpdate URLs, for example, replace the "hosts/" entries with a single line and the LUA IP address and port and updates directory: