5 Replies Latest reply on Sep 2, 2013 12:10 AM by Manish KS

    ePO Upgrade

    tony.lin

      Hi

       

         We have old hardware need to upgrade, so that is what we need to do need to upgrade ePO from 4.5.6 to 5.0.1. here is our environment. how do we do the upgrade.

       

       

       

       

       

      Now

       

      未來版本

       

      OS

       

      Windows Server  2003 SP2

       

      Windows Server  2012

       

      SQL Server

       

      MS SQL Server  2005 SP3

       

      MS SQL Server  2012

       

      McAfee ePO Version

       

      McAfee ePolicy  Orchestrator v4.5.6

       

      McAfee ePolicy  Orchestrator v5.0.1

       

      McAfee Agent

       

      McAfee Agent  4.5 Patch 3

       

      McAfee Agent  4.8 Patch 1

       

      McAfee Viusscan

       

      Virusscan  Enterprise 8.8 Patch 1

       

      Virusscan  Enterprise 8.8 Patch 2

       

      Host DLP

       

      Data Loss  Prevention Endpoint 9.3(No install yet)

       

      Data Loss  Prevention Endpoint 9.3(Not Install yet

       
        • 1. Re: ePO Upgrade
          Manish KS

          HI Tony,

           

          If you could provide few more information about your current ePO would be easy to suggest whether to go for fresh installation of ePO 5.0 or upgrade, e.g.

           

          >How many nodes are being managed by current ePO?

          >What are the policies and tasks are applied currently and how important are those? Are those really required or is it ok for you to configure qgain?

          >Which edition of SQL are you using and are you going for (Express or Full)?

          >Are you going to upgrade hardware on same box on which epO 4.5 is running currently then upgrade OS and ePO or is it going to be new diffrent box  for new ePO 5.0?

           

           

          If you would like to add any more information which may be helpful.

          • 2. Re: ePO Upgrade
            tony.lin

            >How many nodes are being managed by current ePO?

            About 238 nodes

            >What are the policies and tasks are applied currently and how important are those? Are those really required or is it ok for you to configure qgain?

            The policy is almost like default polcy. it need to same as old ePO.

            >Which edition of SQL are you using and are you going for (Express or Full)?

            old one is sql server 2005 so3, new one is SQL 2012 express.

            >Are you going to upgrade hardware on same box on which epO 4.5 is running currently then upgrade OS and ePO or is it going to be new diffrent box  for new ePO 5.0?

            different one

             

             

            if need more information let me know.

            • 3. Re: ePO Upgrade
              Manish KS

              Hi Tony,

               

              Thanks for sharing the information.

               

              According above information I think it's better to go for ePO 5.0 fresh installation on a new box. Once the new ePO 5.0 is installted you can export the system tree structure from your old ePO 4.5 and import into new ePO 5.0 and push the McAfee agent 4.8 as you have planned. For DLP policy also you can export it from old ePO 4.5 and import into new ePO 5.0. For DLP policy you may do the following to export or back up your host Host DLP Security Policy:

              1. Log on to the ePO 4.x.
              2. Click Menu, Data Protection, DLP Policy.
              3. Click File, Save As and save the file.

              NOTE: The following files are exported, containing the Host DLP Security Policy:

              • GlobalPolicy.opg
              • GlobalPolicy.opgc
              • GlobalPolicy.opgg
              • 4. Re: ePO Upgrade
                tony.lin

                Hi,  Manish

                 

                Thank yo for reply, I have question for "ePO 5.0 fresh installation on a new box. Once the new ePO 5.0 is installted you can export the system tree structure from your old ePO 4.5 and import into new ePO 5.0 and push the McAfee agent 4.8 as you have planned."

                 

                     I already set up ePO 5.0, But when I tried brower the client from ePO 4.5 system tree it pop a windows said need to enter domain information, which I did. But got some error messeng show "Failed to enumerate domain, authentication required". also I tired other way (registered server) to transfer client to new ePO server, I have get error from it show "Master agent-server key(s) must be imported into the remote server prior to importing the sitelist. Go to Server Settings to export security keys from this server. Note that visiting this link now will cause you to lose any unsaved changes to this registered server." Any Suggestion?

                 

                Tony

                • 5. Re: ePO Upgrade
                  Manish KS

                  Hi Tony,

                   

                   

                  As you are about deploy the McAfee agent 4.8 on all the client machine it's not necesorry that you need to import the server key. Because once you push the new agant  4.8 through new ePO  5.0 all the client machine will get updated with new sitelist file and start communicating with new epo.

                   

                   

                  Also it is not necesorry  that there should be regestere server or any authentication when you impot or export the system tree. If you are adding the machines with the help of AD you would then you need to register the AD server first and create an ADSynk task. Once the task completed running AD's machines will be added to your system tree. In your case you caan simply export the system tree structure in a text file and import that into new epo. In your case  simply you may refer the steps below:

                   

                   

                   

                   

                  To export from ePO 4.5

                   

                   

                  >Menu>Systems>System tree

                  >Click on System tree Actions>Export Systems

                  >From system select "All Systems in this group and subgroups>OK

                  >Right click on Systems and click on Save as

                  >Give the path to save the file and save it  Systems.txt and Open

                   

                   

                   

                   

                  To import the systems.txt file in ePO5.0:

                   

                   

                  >Menu>System tree>Systemtree Actions>New systems

                  >From how to add systems: IMport systems from a text file into the current group(my orgnization), but do not push agent

                  >Import from file: System and system tree structure

                  >Broswe the systems.txt file where you have saved it

                  >Systems that exist elsewhere in the System Tree:  select  "Leave systems in their current system tree location only"  and click on OK

                   

                   

                  Note:- While exporting or importing the system tree make sure you have selecetd Myorganization.

                   

                   

                  ONce the machines are imported into new ePO run an agent deployment task to deploy the McAfee agent 4.8.