Search

Question/Issue:
You have more than one Symantec AntiVirus Corporate Edition 10.x server group. You want primary servers to download virus definitions from a master primary server in another server group.


Solution:
Configure the master primary server to use LiveUpdate, and configure the other servers to update from the master primary server. Copy the master primary server's root certificate to each server that is in a different server group. Copy each server group's root certificate to the master primary server. Make sure that the computer on which Symantec System Center runs has a server group root certificate for each server.

---

WARNING: Do not configure a Symantec AntiVirus 10.x server to obtain updates from a master primary server that runs an earlier version of Symantec AntiVirus. The master primary server must run Symantec AntiVirus 10.x.

---

To configure the master primary server

1. In Symantec System Center, right-click the server group that contains the master primary server, and then click All Tasks > Symantec AntiVirus > Virus Definition Manager.
2. Click Configure.
3. Verify that Source is set to LiveUpdate (Win32)/FTP (NetWare).
4. Click OK.
5. Check Schedule for automatic updates.
6. Click Schedule.
7. Set the LiveUpdate schedule that you want, and then click OK.
8. Click OK twice.

To configure other servers to update from the master primary server

1. In Symantec System Center, right-click any server group that does not contain the master primary server, and then click All Tasks > Symantec AntiVirus > Virus Definition Manager.
2. Click Configure.
3. Set the Source to Another Protected Server.
4. Click Configure.
5. Select the master primary server.
6. Click OK, and then click OK again.
7. Check Schedule for automatic updates.
8. Click Schedule.
9. Set the update schedule that you want, and then click OK.
   Do not skip this step. Each server checks the master primary server for updates only at the scheduled time. The master primary server does not automatically send virus definitions to servers in other groups.
10. After you configure the master primary server and the other servers, do the following:
    • Copy the master primary's server group root certificate to servers that are in a different server group.
    • Copy the server group root certificate of the other server groups to the master primary server.
      For each server group, you only need to copy one server's server group root certificate to the master primary server.
    • Make sure that the computer running Symantec System Center has a server group root certificate for each server.
      For each server group, you only need to copy one server's server group root certificate to the computer running Symantec System Center.

To find the server group root certificate

• Do one of the following, depending on the operating system of the server:
  • On Windows servers, go to the pki\roots folder in the Symantec AntiVirus program folder, and copy the xxx.x.servergroupca.cer file.
    To locate the Symantec AntiVirus program folder, see "To find the Symantec AntiVirus program folder" in the Technical Information section of this document.
  • On NetWare servers, go to the SYS:SAV\pki\roots folder and copy the xxx.x.servergroupca.cer file.

To copy the server group root certificate(s) to other computers

1. Do one of the following, depending on the operating system of the server:
   • On Windows servers, copy the server group root certificate(s) to the pki\roots folder in the Symantec AntiVirus program folder.
     To locate the Symantec AntiVirus program folder, see "To find the Symantec AntiVirus program folder" in the Technical Information section of this document.
   • On NetWare servers, copy the server group root certificate(s) to the SYS:SAV\pki\roots folder.
2. Restart the Symantec AntiVirus service.

Other communication considerations
Be aware of the following:

• TCP port 2967 must be open on all firewalls between the servers.
  For details, read the document Ports used for communication in Symantec AntiVirus 10.x and Symantec Client Security 3.x.
• The servers' clocks must be within the defined time discrepancy settings in Symantec System Center.
  For help with this, read the document About login certificates in Symantec Client Security 3.x and Symantec AntiVirus Corporate Edition 10.x.

Technical Information:
To find the Symantec AntiVirus program folder

1. On the Windows taskbar, click Start > Run.
2. In the Run dialog box, type the following text:
   
   cmd
   
   
3. Click OK.
4. At the command prompt, type the following:
   
   net share
   
   
5. Under Share name, find the VPHOME listing.
   The folder that appears in the Resource column is the Symantec AntiVirus program folder and contains the pki\roots folder.

References:
For help with earlier versions of Symantec AntiVirus, read the document Configuring a Symantec AntiVirus 8.x or 9.x server to update virus definitions from a server in a different server group.

Document ID: 2005052308392048
Last Modified: 09/28/2006
Date Created: 05/23/2005
Operating System(s): Windows 2000, Windows XP Professional Edition, Windows XP Tablet PC, Windows Server 2003 32-bit Edition, Windows XP Media Center Edition 2005
Product(s): Symantec AntiVirus 10.1, Symantec AntiVirus Corporate Edition 10.0, Symantec Client Security 3.0, Symantec Client Security 3.1
Release(s): SAV 10.0 [All Releases], Symantec AntiVirus 10.1 [All Releases], Symantec Client Security 3.1 [All Releases], Symantec Client Security 3.x [All versions]

Site Index · Legal Notices · Privacy Policy · Contact Us · Global Sites