Migrating to Symantec Client Security 3.0, part 3

Symantec.com > Enterprise > Support > Knowledge Base

Migrating to Symantec Client Security 3.0, part 3

Question/Issue:
Upgrading to Symantec Client Security 3.0, part 3 How to upgrade to Symantec Client Security 3.0, part 3 Migrating to Symantec Client Security 3.0, part 3 How to migrate to Symantec Client Security 3.0, part 3

Symptoms:
This document discusses the process of migrating to Symantec Client Security 3.0 from previous versions of Symantec Client Security, Symantec AntiVirus Corporate Edition, or Norton AntiVirus Corporate Edition.

Solution:

Page: < Previous 1 2 3 4 Next >

Laying the foundations
This page describes the first stage in migrating a managed network: upgrading the basic management infrastructure that is necessary in order to deploy the migration to the entire network.

Upgrading the management infrastructure
The first checkpoint in migration is to install a new version of the Symantec System Center and display your legacy server groups in the new version. Once the new version of the Symantec System Center is installed, you can use that as a platform to migrate the rest of the network. In a migration scenario, the computer that runs the Symantec System Center can be in one of the following four places:

On the primary management server
On a client that is managed by the primary server
On a secondary management server
On a client that is managed by a secondary server

In order to install Symantec System Center, the computer must already be running the current version of Symantec Client Security. In addition, any computer with the new version of Symantec Client Security installed must be managed by a server that is also running the current version. Therefore, you must migrate Symantec Client Security on the computer that runs the Symantec System Center and on any computers above that computer in the hierarchy.

For example, if you plan to run the Symantec System Center on a client managed by a secondary management server (scenario 4), you must uninstall the current Symantec System Center, then migrate the primary management server, the secondary management server, and that client, and then install the Symantec System Center.

Note: The current version of the Symantec System Center does not support managing mixed environments that include earlier versions of Symantec Client Firewall with the current version of Symantec Client Firewall. To manage a mixed Symantec Client Security environment, you must group legacy clients into a separate group and manage them from a legacy server that uses the earlier version of Symantec Client Security, including the Symantec System Center.

Before you upgrade the Symantec System Center
No matter which scenario you follow to upgrade the Symantec System Center, read the following information:

Before you install Symantec System Center on a Windows Terminal Server, the Terminal Server must be in Remote Administration mode. After you install Symantec System Center and restart the computer, you can put the Terminal Server in Application Mode. When it is installed on a Terminal Server, open Symantec System Center locally. Do not connect to Symantec System Center by using a terminal session.
If legacy Quarantine Console or Server runs on a computer that you plan to migrate, uninstall this software before migration.
Verify that the time clocks on all computers that you migrate are within 24 hours plus or minus of the time on the primary management server. You can change these values, if necessary, after the Symantec System Center upgrade by using the Configure Login Certificate Settings dialog box in the new Symantec System Center console. Symantec Client Security server and client communication will fail if you do not meet this requirement.
The upgrade is complete only after you unlock your migrated server group from the Symantec System Center console and copy the server group root certificates to the directory structure that supports the Symantec System Center, when prompted. The default user name is "admin."

Upgrading the Symantec System Center for your scenario
Choose the scenario that applies to the location of the first primary management server in the first server group that you want to migrate, and follow that procedure for migration. You must have physical access to each computer, and you must install by using the CD.Click an icon to either expand (

) or collapse (

) each section. (If you cannot expand a section, then read the document Cannot expand sections in a Symantec Knowledge Base document.)

Upgrading the Symantec System Center for scenario 1

Upgrading the Symantec System Center for scenario 2

Upgrading the Symantec System Center for scenario 3

Upgrading the Symantec System Center for scenario 4

Migrating the first management servers
You must migrate the first primary management server in the first server group by installing the software from the Symantec Client Security CD. This procedure also applies to any secondary servers you migrate before upgrading the Symantec System Center.

To migrate the first management servers

From the Symantec Client Security CD, run Setup.exe.
In the Symantec Client Security panel, click Install Symantec Client Security > Install Symantec Client Security.
Follow and complete the prompts until you are prompted to enter a user name.
In the Create Server Group User panel, in the Username box, accept or change the user name that will be used to administer the existing server group, and then click Next.
Follow and complete the prompts until installation completes.
When installation completes, restart the computer.

Migrating clients by using the CD
To migrate from an earlier version of Symantec Client Security, you can follow the standard installation procedure for installing a client from the CD.

To migrate clients by using the CD

From the Symantec Client Security CD, run Setup.exe.
In the Symantec Client Security panel, click Deploy Symantec Client Security.
Proceed with the upgrade process.
Restart the computers if necessary.

Installing the Symantec System Center
You can install the Symantec System Center console and components from the Symantec Client Security CD.

To install the Symantec System Center console and components

From the Symantec Client Security CD, run Setup.exe.
On the Install Administrator Tools menu, click Install Symantec System Center.
Respond to the prompts until the installation completes.
Restart the computer.

Unlocking the migrated server group
When you unlock a server group for the first time, a message appears that prompts you to copy the server group root certificate. This certificate is copied to the pki directory structure that supports the Symantec System Center.

To unlock the migrated server group

Start the Symantec System Center.
In the left pane, right-click the migrated server group, and then click Unlock.
In the "Server group root certificate not found" dialog box, select either option, and then click OK.
In the Login dialog box, type the user name that you entered when you migrated the primary management server, type the password that you used to unlock the server group in the legacy version of the Symantec System Center, and then click OK.

Backing up the server group root certificate
This is a quick but vital step. You must back up the server group root certificate after unlocking the server group for the first time, or the server group and its settings will be irrecoverable in the event of a critical failure on the primary management server.

To back up the certificate

In Windows Explorer, navigate to the Symantec AntiVirus program folder.
By default, this is C:\Program Files\SAV\Symantec AntiVirus\.
Copy the Pki folder to removable media.
The contents of the Pki folder should be only a few Kb in size.
Store the Pki folder in a safe location.
In the event of a catastrophic server failure, these files will be necessary in order to recover client/server communication. For more information, read the document Steps to minimize recovery time in the event of a server failure.

Click here to go to Part 4: Migrating clients and servers.

Page: < Previous 1 2 3 4 Next >

Available Translations:

Document ID: 2005032315142648
Last Modified: 10/03/2007
Date Created: 03/23/2005
Operating System(s): Windows 2000, Windows XP Home, Windows XP Professional Edition, Windows XP Tablet PC, NetWare 5.1, NetWare 6.0, NetWare 6.5, Windows XP 64-Bit Edition 2003, Windows Server 2003 32-bit Edition, Windows Server 2003 64-bit Edition, Windows XP Media Center Edition 2005
Product(s): Symantec AntiVirus Corporate Edition 10.0, Symantec Client Firewall 8.0, Symantec Client Security 3.0
Release(s): SAV 10.0, SAV 10.0 [All Releases], Symantec Client Firewall 8.6, Symantec Client Firewall 8.x [All versions], Symantec Client Security 3.0, Symantec Client Security 3.x [All versions]