Re: upgrading Symantec Client Security

I was able to do a successful upgrade from 10.1.5 to 10.1.6 on our
Symantec server without uninstalling or breaking the pki with the
clients. Also I upgraded several clients to 10.1.6 before upgrading the
server and they were able to communicate with the 10.1.5 server just
fine. Still I strongly recommend backing up those pki certs as described
in the Symantec administrator guide -- if you don't and you lose them
you will need to manually update the cert on each client in
order to reestablish communication.

Now to push out the latest version to clients you need to update the
installation files in the cli-inst directory in the VPHOME network
share. These files should be updated automatically when you update your
server, but you can also update these installation files and push them
out to clients without updating the server, or make an different share
with the updated installation files and push them out from there.
Personally I haven't tried this as I don't use the Client rollout
feature but it's an option if you want to get the clients updated before
the server.

I would recommend testing all this on a secondary manager (perhaps
running in a VM?) with a handful of test clients just to make sure
everything goes smoothly. If you run into any specific issues just let
me know and I will open a case with Symantec.

Allison Henry
System and Network Security
University of California, Berkeley
http://security.berkeley.edu

Roger Emond wrote:
> The last time we responded to one of these alerts, we rushed it and it
> ended up taking much more time, so I'd like to ask more questions. I've
> been digging through Symantec's site, and I'm not finding the answers.
> We are currently using the 10.1.5 version of the SCS Server.
> Can we upgrade the Server to 10.1.6 and then push the update out to the
> clients?
> Do we have to uninstall version 10.1.5 first?
> Do we have to save the pki or some other files so that the clients can
> still recognize the server?
>
>
>
>
>
> Roger Emond
> Programmer / Analyst
> School of Social Welfare
> 120 Haviland Hall, MC 7400
> University of California
> Berkeley, CA 94720-7400
> phone (510) 643-6666
> fax (510) 643-6126
>
>
> ------------------------------------------------------------------------
> The following was automatically added to this message by the list server:
>
> To learn more about Micronet, including how to subscribe to
> or unsubscribe from its mailing list and how to find out
> about upcoming meetings, please visit the Micronet Web site:
>
> http://micronet.berkeley.edu/
>
> Messages you send to this mailing list are public and world-viewable,
> and the list's archives can be browsed and searched on the Internet.
> This means these messages can be viewed by (among others) your bosses,
> prospective employers, and people who have known you in the past.

------------------------------------------------------------------------
The following was automatically added to this message by the list server:

To learn more about Micronet, including how to subscribe to
or unsubscribe from its mailing list and how to find out
about upcoming meetings, please visit the Micronet Web site:

http://micronet.berkeley.edu/

Messages you send to this mailing list are public and world-viewable,
and the list's archives can be browsed and searched on the Internet.
This means these messages can be viewed by (among others) your bosses,
prospective employers, and people who have known you in the past.
Received on Mon Jul 16 2007 - 11:23:21 PDT