How to install Symantec Endpoint Protection Manager (SEPM) 11

From espinola.net

Jump to: navigation, search

without breaking it...

Symantec Endpoint Protection Manager (SEPM) 11 is a very sensitive Java-based application that does not provide adequate error conditions or output about the installation process or how/why the system service crashes when trying to run it. Because of this, how it is installed is paramount to its future successful use.

On This Page

Prerequisites

  • Install SEPM only while logged in as a local Administrator.
    This is a Symantec technical support recommendation.
  • Install SEPM only while logged into the console. Remote console sessions with remote access tools like VNC or DameWare are OK, but do not use Remote Desktop (RDP).

Preparations

  1. Download the latest version of Symantec Endpoint Protection: 11.0 MR1 (11.0.1000).
    1. Review the Changelog for 11.0.1000.
    2. Download SEP11 MR1 (11.0.1000)
    3. Download SEP11 MR1 client .MSP patches (if necessary)
  2. Download Sun Microsystems Java: Specifically version 1.5.0.06.
    1. Download J2SE Runtime Environment 5.0 Update 6.
      This is a Symantec technical support recommendation. Symantec is very specific about this version, although they do not say why. It would be wise to disable the auto-update after it has been installed to prevent accidental version changes later.

Installation / upgrade procedure

  1. Install IIS (if it's not already present).
  2. Install the SQL Client (if using a SQL back-end).
    Don't be lazy and just point the installer at a local or remote /binn directory; install the client via your SQL CD.
  3. Install updates for IIS and SQL.
    This will likely require a reboot; particularly for the SQL components.
  4. Install Java 1.5.0.06.
  5. Install Symantec Endpoint Protection Manager.
    1. If necessary, reset or tweak Security options of the Internet Options control panel to allow SEPM interface to display all content.
      This is necessary if the Internet Explorer Enhanced Security Configuration has been applied, or settings have been otherwise set too high.
  6. Deploy Symantec Endpoint Protection clients via SEPM, or deploy MSP updates via Group Policy.

Uninstallation / preinstallation cleanup tool

Because Symantec antivirus software is notorious for leaving trace files and registry settings behind after performing an uninstall procedure of thier applications, they have developed an automated tool for removing these troublesome remnants, called CleanWipe.

CleanWipe

CleanWipe will remove all remnants of the following products from a computer:

  • Symantec Endpoint Protection
  • Symantec AntiVirus
  • Symantec Client Security
  • Symantec Sygate Enterprise Protection
  • Symantec Network Access Control
  • Norton AntiVirus
  • Symantec System Center
  • Symantec Endpoint Protection Manager

Download Symantec CleanWipe

Retrieved from "http://www.espinola.net/wiki/How_to_install_Symantec_Endpoint_Protection_Manager_(SEPM)_11"
Personal tools