Syed Jahanzaib Personal Blog to Share Knowledge !

April 10, 2018

Symantec SEPM 12.x Migration to 14.x


Today was a hectic day. We received new series of HP G5/8th Gen laptop which supports Windows 10 only  , & when we tried to installed SEPM 12.x client, it stated that the App is not compatible with this version of windows. That was really an hectic news for us because our SEPM server was based on windows 2003 32bit & there is no straightforward method for in-place upgrade to SEPM 14. It requires minimum 64bit of server window 2008 or above server . Any way we managed to migrate SEPM 12.1.6 to SEPM 14.x on Windows 2012 R2 64bit at a cost of whole day brainstorming.

Following are steps I followed for the migration of SEPM v12 W2003 32bit to SEPM v14 on Windows 2012 R2 64bit.

First Take Backup of current SEPM 12.x DB

Step 1# Back up the Database

  1. Click Start Programs Symantec Endpoint Protection Manager > Database Backup and Restore.
  2. Click Back Up. The database backup file name is and is located in the following directory:

\Program Files\Symantec\Symantec Endpoint Protection Manager\data\backup

Copy above folder at some centralized file server folder or USB.

Step 2# Back up the Disaster Recovery File

Copy the following folder at some centralized file server folder or USB.

\Program Files\Symantec\Symantec Endpoint Protection Manager\Server Private Key Backup\

Now shutdown current SEPM Server machine & proceed to install SEPM on new machine

Step  3# Install SEPM on new Windows 2012 R2 server

on New Windows 2012 R2 , configure same Computer name & IP Address which was setup on old SEPM server.

Install the Same SEPM version, in my case it was 12.1.6 MP6.

Once installation is done, & When the Management Server Configuration Wizard runs, select Custom configuration & choose Use a recovery file. Point to the backup folder we took in Step 1/2.

As showed in the image below …

1- sav restore from backup.JPG

Once its done, Start the SEPM console one time to confirm if all is running ok.

Step 4# Restore the database:

To restore DB, Stop the following services,

  • Symantec Endpoint Protection Manager
  • Symantec Endpoint Protection Manager Webserver
  1. Click Start Programs Symantec Endpoint Protection Manager > Database Backup and Restore.
  2. Click Restore.

Once All done, reboot server one time and make sure all services are started properly in the SERVICES console.

User Rights Assignment in Group Policy.

If your SEPM is an member of Active Directory then services will not start dueto lack of LOGON AS SERVICE rights.

As a workaround I installed GROUP POLICY MANAGEMENT on the new SEPM server, and edit Group Policy to add following users in LOGON AS SERVICE section.

  • NT SERVICE\semsrv
  • NT SERVICE\semwebsrv
  • NT SERVICE\semapisrv

Since I was editing Domain Group Policy from the SEPM server itself, that is why I changed Location to local PC and then above accounts was added successfully. As a workaround we can add user SID as well. See following command to get SID of accounts and SID accordingly.

sc showsid semsrv
sc showsid semwebsrv

Step 5# Upgrade

Now run the 14.x setup , and choose upgrade. the upgrade process is quite simple and generally requires clicking next button.



Client SEPM 14.x Server Console

sepm server.JPG

Client SEPM 14.x Client

client sepm.JPG

Few Helpful links for Broadcom Symantec:

To access Symantec web admin Console


Use Admin or your named id that was configured during setup

– Backup DB Location

C:\Program Files (x86)\Symantec\Symantec Endpoint Protection Manager\data\backup

To access Broadcom Support Panel over the internet

To View Latest SEPM server version & history

– To View Virus Definitions & Security Updates version

– DR – Recovery

-Checking that Symantec Endpoint Protection Manager has the latest content

– Upgrade to latest (embedded db vs sql express)

– SEPM Heart beat cycle is 2 hours,Heartbeat%20is%20two%20hours.,changes%2C%20upload%20logs%2C%20etc.


  1. Sorry, but I am confused. I didn’t see you install SEPM 14? As stated above, when you’re installing the SEPM on the new server (Windows 2012 R2), you said “Install the Same SEPM version, in my case it was 12.1.6 MP6”. After the installation, you choose to recover the backup that you created. So when did you install the SEPM 14 itself?


    Comment by Tom — September 7, 2018 @ 4:37 AM

    • accept apology . I missed the upgrade 14.x part. after you install the 12.x on 2012 server andr estore the DB, make sure al things er working. Once its ok, then simply execute the 14.x setup files, and choose upgrade, upgrading is actually very simple and requires few clicking on ext buttons.


      Comment by Syed Jahanzaib / Pinochio~:) — September 7, 2018 @ 1:19 PM

  2. Thank you for clarifying! I’m gonna be doing the upgrade this weekend so this is very helpful for me. Thanks again.


    Comment by Tom — September 24, 2018 @ 11:50 PM

RSS feed for comments on this post. TrackBack URI

Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

%d bloggers like this: