Syed Jahanzaib Personal Blog to Share Knowledge !

April 10, 2018

Symantec SEPM 12.x Migration to 14.x

Filed under: Symentec Related — Tags: , — Syed Jahanzaib / Pinochio~:) @ 10:04 AM


Today was a hectic day. We received new series of HP G5/8th Gen laptop which supports Windows 10 only  , & when we tried to installed SEPM 12.x client, it stated that the App is not compatible with this version of windows. That was really an hectic news for us because our SEPM server was based on windows 2003 32bit & there is no straightforward method for in-place upgrade to SEPM 14. It requires minimum 64bit of server window 2008 or above server . Any way we managed to migrate SEPM 12.1.6 to SEPM 14.x on Windows 2012 R2 64bit at a cost of whole day brainstorming.

Following are steps I followed for the migration of SEPM v12 W2003 32bit to SEPM v14 on Windows 2012 R2 64bit.

First Take Backup of current SEPM 12.x DB

Step 1# Back up the Database

  1. Click Start Programs Symantec Endpoint Protection Manager > Database Backup and Restore.
  2. Click Back Up. The database backup file name is and is located in the following directory:

\Program Files\Symantec\Symantec Endpoint Protection Manager\data\backup

Copy above folder at some centralized file server folder or USB.

Step 2# Back up the Disaster Recovery File

Copy the following folder at some centralized file server folder or USB.

\Program Files\Symantec\Symantec Endpoint Protection Manager\Server Private Key Backup\

Now shutdown current SEPM Server machine & proceed to install SEPM on new machine

Step  3# Install SEPM on new Windows 2012 R2 server

on New Windows 2012 R2 , configure same Computer name & IP Address which was setup on old SEPM server.

Install the Same SEPM version, in my case it was 12.1.6 MP6.

Once installation is done, & When the Management Server Configuration Wizard runs, select Custom configuration & choose Use a recovery file. Point to the backup folder we took in Step 1/2.

As showed in the image below …

1- sav restore from backup.JPG

Once its done, Start the SEPM console one time to confirm if all is running ok.

Step 4# Restore the database:

To restore DB, Stop the following services,

  • Symantec Endpoint Protection Manager
  • Symantec Endpoint Protection Manager Webserver
  1. Click Start Programs Symantec Endpoint Protection Manager > Database Backup and Restore.
  2. Click Restore.

Once All done, reboot server one time and make sure all services are started properly in the SERVICES console.

User Rights Assignment in Group Policy.

If your SEPM is an member of Active Directory then services will not start dueto lack of LOGON AS SERVICE rights.

As a workaround I installed GROUP POLICY MANAGEMENT on the new SEPM server, and edit Group Policy to add following users in LOGON AS SERVICE section.

  • NT SERVICE\semsrv
  • NT SERVICE\semwebsrv
  • NT SERVICE\semapisrv

Since I was editing Domain Group Policy from the SEPM server itself, that is why I changed Location to local PC and then above accounts was added successfully. As a workaround we can add user SID as well. See following command to get SID of accounts and SID accordingly.

sc showsid semsrv
sc showsid semwebsrv

Step 5# Upgrade

Now run the 14.x setup , and choose upgrade. the upgrade process is quite simple and generally requires clicking next button.



Client SEPM 14.x Server Console

sepm server.JPG

Client SEPM 14.x Client

client sepm.JPG

%d bloggers like this: