cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

ePO 5.9.1 migration from Server 2008 to 2016 or 2019

Planning to migrate ePO 5.9.1 from server 2008 to 2016/2019. Below is the current structure. ePO 5.9.1 hosted on Server 2008 R2 Std SP1 DB is SQL 2008 R2 and hosted on Server 2008 R2 Std SP1. Agent handler 5.9.1 hosted on Server 2008 R2 Std SP1. Can we migrate my above estate without upgrading ePO on Windows server 2016/2019
10 Replies
Former Member
Not applicable
Report Inappropriate Content
Message 2 of 11

Re: ePO 5.9.1 migration from Server 2008 to 2016 or 2019

Hello @User30455258 

Yes you can do it.

Below is the supported platform article:

https://kc.mcafee.com/corporate/index?page=content&id=KB51569

SQL 2019 and OS 2019 both are not supported with the ePO 5.9.x

For migration please take back up of the epo server and epo database, Once the backup is completed please restore it on the new server.

https://kc.mcafee.com/corporate/index?page=content&id=KB66616 

Also refer,

https://kc.mcafee.com/corporate/index?page=content&id=KB87731

or run the IISCrupto tool, select ciphers click on best practices >Apply and then reboot.

Was my reply helpful?

If you find this post useful, please give it a KudosAlso, please don't forget to select "Accept as a Solution" if this reply resolves your query!

Re: ePO 5.9.1 migration from Server 2008 to 2016 or 2019

We have SQL DB 2008R2, so can we migrate database from 2008 R2 to SQL 2016?

 

Also we have 15K systems and due to Covid-19 situation all user working from home and unable connect VPN or office network. Most systems don't have current communication.

Is any communication issue after migration or any setting require on new server?

Former Member
Not applicable
Report Inappropriate Content
Message 4 of 11

Re: ePO 5.9.1 migration from Server 2008 to 2016 or 2019

For Moving the database from one server to another sever, Please refer the below Article:

https://kc.mcafee.com/corporate/index?page=content&id=KB68427

Please make sure that TLS 1.1 and 1.2 is enabled.

Please make sure that the SQL Version is supported with the OS.

As you can see that as of now the machines are not communicating with ePO and once the migration will get completed it will remains the same.

If you want you can install agent handler in DMZ.

 

Was my reply helpful?

If you find this post useful, please give it a KudosAlso, please don't forget to select "Accept as a Solution" if this reply resolves your query!

cdinet
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 5 of 11

Re: ePO 5.9.1 migration from Server 2008 to 2016 or 2019

Even if you install an agent handler in the dmz, you would need to somehow get a new sitelist to the clients to see the new agent handler.  That can be done several ways - reinstall agent once agent handler is set up (which might be difficult to new users, or send users a bat file to run maconfig command to reprovision agent.  See Install guide for the agent on how to do that.  Basically, you would follow the instructions to make an unmanaged system managed, even though they are already managed.

Was my reply helpful?
If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?

Re: ePO 5.9.1 migration from Server 2008 to 2016 or 2019

Thanks for the update, however I have few more questions.

1. We have Agent handler configured in DMZ, but still all systems are not reporting to console and some reporting to console. So It is mandatory to install Agent or run Bat file after ePO and DB migration.

2. Can we run BAT file from GPO or SCCM ?

3.

cdinet
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 7 of 11

Re: ePO 5.9.1 migration from Server 2008 to 2016 or 2019

Yes, you can run the bat file from gpo or sccm. just make sure it runs as system so user access control doesn't cause issues.

Was my reply helpful?
If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?

Re: ePO 5.9.1 migration from Server 2008 to 2016 or 2019

Thanks,

My last question.

Please let me know technical reason to deploy Agent or BAT file after migration.

Why it is mandatory, need to explain our customer.

cdinet
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 9 of 11

Re: ePO 5.9.1 migration from Server 2008 to 2016 or 2019

If you are just transferring systems, you don't need to.  If the systems are external and not able to reach your new server that you are transferring them to and you want them to use a dmz agent handler, then you must either reinstall new agent that has the dmz agent handler in its sitelist, or run the maconfig to point it to new sitelist that contains the dmz agent handler.  it all depends on what your scenario is.  The bat file/reinstall is only needed if there is no other way the clients can get an updated sitelist if they can't talk to the main epo server.  So, depending on your circumstances, it may not be necessary.

Was my reply helpful?
If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?

Re: ePO 5.9.1 migration from Server 2008 to 2016 or 2019

Thanks but I have some confusion on above statement.

We are migrating SQL DB and EPO from server 2008 to server 2016, We have systems in same domain. There is no any external system. However in current Covid-19 situation most of the user not connected to VPN, they are connected to external network.

So still we need to reinstall agent or redeploy bat file?

If yes, please let me know technical reason behind to install Agent?

 

You Deserve an Award
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community