How can Migrate ePO v5.9.1 from 2008 server to 2019 server

[thienpm]

Dear Support,

Please help me step by step how can 

Migrate ePO v5.9.1 from the 2008 R2 server to another new OS 2019 server.

1. how about a database

2. How about ePO version which will run OS 2019

3. How about communication from client to new ePO server

[vivs]

Hello @thienpm 

Thanks for your post.

I would like to inform you that ePO 5.9.X is not supported with Windows 2019 Server.

https://kc.mcafee.com/corporate/index?page=content&id=KB51569

You can migrate it to 2016 server which is supported..

All you need to is take a backup of the ePO Server and ePO Database follow

https://kc.mcafee.com/corporate/index?page=content&id=KB66616 

Once the migration will completed successfully all the communication will get established between client to ePO Server.


Was my reply helpful?
If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?

[ludaneva]

Hello @thienpm,

One other option would be to upgrade ePO 5.9.1 to ePO 5.10 on the existing Win 2008 R2, making sure that a supported SQL server version for the new ePO 5.10 is also already in place (Please check KB51569)

Then, migrate / move ePO 5.10 from Win 2008 R2 to the new Win 2019 server system via Disaster Recovery (DR) snapshot. For information on DR Snapshot and how to move an ePO server to a different system please check this ePO product Guide link: Using a Snapshot to restore your server

In case you would also need to move the ePO database to a supported SQL server version before upgrading to ePO 5.10, please see KB68427

Regards

 

[aguevara]

It is also important to note that if you are doing a OS migration then you should consider how the agents will communicate to the new OS, 

will the ePO IP address change? 

will the FQDN change? 

it is advisable not to change both at the same time, for example if the FQDN changes but not the IP then the Mcafee Agent will attempt to communicate to the ePO Agent handler FQDN and fail but then it will attempt to communicate to the Handler using its IP and succeed, when that happens then new FQDN will be updated for the agent to use too

also to recall KB66616:

The agent uses either the last known IP address, DNS name, or NetBIOS name of the ePO server. If you change any one of these values, make sure that the agents have a way to locate the server. The easiest way is to retain the existing DNS record and change it to be directed to the new IP address of the ePO server. After the agent successfully connects to the ePO server, it downloads an updated Sitelist.xml with the current information.

[thienpm]

Dear Support,

Can you show me step by step how to upgrade ePO V 5.10 from V5.9.1 without losing data?

I find the guide but I don't see.

Please share for me about this guide

[vivs]

Hello @thienpm 

Thanks for your response.

You need to follow KB66616 for taking the backup of ePO Server and ePO Database.

Once the backup is ready, Download IIS Crypto Tool https://www.nartac.com/Products/IISCrypto/Download

Download the GUI one.

Once downloaded, Run the IIS Crypto Tool and click on Best Practices for Schannel (this is to ensure TLS 1.2 is enabled) and Apply after that restart the machine, It will not get restarted automatically.

Once machine is restarted download the ePO 5.10 from download site and run the setup file.

At one step you will get the ePIP tool which is in-built with the ePO 5.10.

Run the ePIP tool and complete all the check list and proceed further.

Do refer the below KB article for the ciphers:

https://kc.mcafee.com/corporate/index?page=content&id=KB91296

Please do make sure that you have good backup available before upgrading the ePO.

If in case something goes wrong while upgrading we should be able to restore it back usig the backup and steps suggested in kb66616.

Was my reply helpful?
If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?

[cdinet]

You can also view this for upgrade guidance.

https://community.mcafee.com/t5/ePolicy-Orchestrator-ePO/Watch-ePO-5-10-Upgrade-Best-Practice-Spotli...