Skip navigation
McAfee Secure sites help keep you safe from identity theft, credit card fraud, spyware, spam, viruses and online scams
3543 Views 12 Replies Latest reply: Sep 30, 2013 12:38 AM by rgc RSS 1 2 Previous Next
smoggy333 Newcomer 9 posts since
Sep 4, 2013
Currently Being Moderated

Sep 5, 2013 6:57 AM

HELP ! Migration from ePO 4.5.7 to 5.0.1

Hi All,

 

I have been tasked with migrating my company’s ePO server (Virtual Server, windows 2003 x86 SP2, ePO version 4.5.7) to a new Virtual server running Windows 2008 R2 x64 running ePO 5.0.1.

 

I am a noob when it comes to ePO, we have no real experience in-house, what I would like advice about is I have built the new 2008 server and I have run the McAfee compatibility check on the old server and here are the results…

 

McAfee ePolicy Orchestrator Product Compatibility Check

************

These products are incompatible with ePO version 5.0; they must be removed or upgraded before ePO setup can continue:

 

Anti-Spyware Enterprise 8.7.0.107 (VSEMAS870000) - no known compatible version

GroupShield for Lotus Domino 7.0.1105.104 (GSD7REPORTS) - no known compatible version

Host IPS 7.0.5.106 (HOSTIPS_META) - no known compatible version

Host IPS 8.0.0.508 (HOSTIPS_8000) - requires Host IPS 8.0.3.701

Host IPS 8.0.0.508 (HostIpsAdv) - requires Host IPS 8.0.3.701

Host IPS 8.0.0.508 (HostIPSLicense) - requires Host IPS 8.0.3.701

McAfee VirusScan Enterprise for Linux Reports 1.0.115 (LYNXSHLDPARSER) - requires McAfee VirusScan Enterprise for Linux Reports 1.7.1.1581

Policy Auditor 5.3.0.212 (BenchmarkEditor) - no known compatible version

Policy Auditor 5.3.0.212 (Findings) - no known compatible version

Policy Auditor 5.3.0.212 (PACore) - no known compatible version

Policy Auditor 5.3.0.212 (PARollup) - no known compatible version

Policy Auditor 5.3.0.212 (PolicyAuditor) - no known compatible version

Policy Auditor Engine 5.3.0.212 (AUENGINEMETA) - no known compatible version

Rogue System Detection 4.5.7.166 (rsd) - requires Rogue System Detection 4.7.1.120

Security for Mac (Anti-Malware) 8.6.1.0.189 (VSCANMAC8610) - no known compatible version

SiteAdvisor Enterprise 1.6.0.108 (SITEADV_1500) - no known compatible version

SiteAdvisor Enterprise 1.7.0.109 (SAE_META) - no known compatible version

Spam Killer for Lotus Domino 7.0.1105.104 (SMDWIN__7000) - no known compatible version

Spam Killer for Microsoft Exchange 2.1.1350.108 (SKE2REPORTS) - no known compatible version

Spam Killer for Microsoft Exchange 2.1.1350.108 (SPAMKILR2100) - no known compatible version

Virex (EOL) 1.0.138 (VIREXREPORTS) - no known compatible version

VirusScan Enterprise 1.2.0.136 (VIRUSCANREPORTS) - requires VirusScan Enterprise 1.2.0.228

VirusScan Enterprise 8.7.0.185 (VIRUSCAN8700) - no known compatible version

VirusScan Enterprise 8.8.0.169 (VIRUSCAN8800) - requires VirusScan Enterprise 8.8.0.348

VirusScan Enterprise for Linux 1.5.0.115 (LYNXSHLD1500) - no known compatible version

VirusScan Enterprise for Linux 1.5.1.0.153 (LYNXSHLD1510) - no known compatible version

VirusScan for Mac (EOL) 8.5.0.138 (VIREXUB_8500) - no known compatible version

************

ePO may be upgraded with the below products installed, but their management extension will be disabled and should be upgraded when ePO starts after setup:

SiteAdvisor Enterprise 3.0.3.231 (SITEADVMETA) - requires SiteAdvisor Enterprise 3.5.0.253

SiteAdvisor Enterprise Web Filtering for Endpoint 3.0.0.152 (SITEADVCFMETA) - requires SiteAdvisor Enterprise Web Filtering for Endpoint 3.5.0.152

 

… my question is what are the next steps to start the migration process ? If I upgrade certain packages will there be an impact on the business ???

 

I apologise if these are basic questions but I really do not know were to start.

 

Thank you all in advance for taking the time to read this post and I appreciate your advice.

 

Kind regards.

  • Laszlo G Veteran 1,213 posts since
    May 23, 2007
    Currently Being Moderated
    1. Sep 9, 2013 11:12 AM (in response to smoggy333)
    Re: HELP ! Migration from ePO 4.5.7 to 5.0.1

    Hi smoggy333, the first thing you need to do is checking which products you're using at your company beaucse on older ePO versions a lot of extensions were added by default.

     

    Once you know which ones you're using then you can remove unused extensions, then you'll have to test new prodcut versions on some computers prior to upgrade all of them.

     

    I know it can be a long road but I think it will be the best way (at least more secure) to prepare the migration.

  • jmcleish Volunteer Moderator 965 posts since
    Jun 20, 2003
    Currently Being Moderated
    3. Sep 10, 2013 9:12 AM (in response to smoggy333)
    Re: HELP ! Migration from ePO 4.5.7 to 5.0.1

    If you are going from x86 to x64 then you would transfer your systems from 4.5.7 to 5.0.1

     

    You import the epo v 5 keys into v4 and  (page 124 of ePO 5 product guide) register the server. Then 'transfer systems' to the new one.

     

    I'm currently doing something similar- 4.5.4HF1 (x86) to 4.6.6 (x64) in preperation for upgrading to epo 5. I exported all my policies and tasks and imported them into the new EPO sever. When i transferred the systems they picked up the correct policies.

     

    However, it doesn't transfer assigned encrypted users on machines that are encrypted (calling out for a product enhancement there!) so beware of any encrypted machines you have.

     

    I sent up the same structure and assigned the tasks and policies to teh correct groups first, then tested a couple of machines to see how it went..

     

    Not had a look at ePO 5 yet, so can't help on that side of things.

     

    HTH

    Jane


    ---------------------------------------------------------
    ePO 4.6.7 (x86)
    ePO 4.6.7 (x64)
    VScan 8.7.0 p4,p5 
    VScan 8.8 p3
    VirusScan for Mac 9.2/9.6
    Groupshield 7.0.1
    EEPC v6.1.1/ v6.2.1
    MA  4.6.0.2292 / 4.6.0.3122/ 4.8.0.1500
    MA Mac  4.6.0.1694/ 4.8.0.887
  • jmcleish Volunteer Moderator 965 posts since
    Jun 20, 2003
    Currently Being Moderated
    5. Sep 10, 2013 10:03 AM (in response to smoggy333)
    Re: HELP ! Migration from ePO 4.5.7 to 5.0.1

    The main issue is that your current server is x86 and epo 5 is x64.

     

    there is this document- but i read quite a few posts that it didn't work in, so i discounted it.

     

    http://kc.mcafee.com/corporate/index?page=content&id=KB71078

    How to migrate ePO 4.5 or ePO 4.6 from a 32-bit system to a 64-bit system (or to a different installation path)

     

    You could always backup your virtual server, try it then if it doesn't work, bring the working one back online.

     

    Don't know what the migration tool is as i have not looked at it yet.


    ---------------------------------------------------------
    ePO 4.6.7 (x86)
    ePO 4.6.7 (x64)
    VScan 8.7.0 p4,p5 
    VScan 8.8 p3
    VirusScan for Mac 9.2/9.6
    Groupshield 7.0.1
    EEPC v6.1.1/ v6.2.1
    MA  4.6.0.2292 / 4.6.0.3122/ 4.8.0.1500
    MA Mac  4.6.0.1694/ 4.8.0.887
  • JoeBidgood McAfee SME 2,868 posts since
    Sep 11, 2009
    Currently Being Moderated
    6. Sep 10, 2013 10:23 AM (in response to smoggy333)
    Re: HELP ! Migration from ePO 4.5.7 to 5.0.1

    Hi...

     

    The migration tool will do this for you - but to answer your earlier question, it won't move the database for you. If the DB is currently on the same machine as the 4.5 server and you're intending to move it to the ePO 5 server, then I would move the DB to the ePO 5 server first, then run the migration tool. Something like this:

     

    Install SQL on the ePO 5 server

    Stop the ePO 4.5 services

    Back up the ePO DB

    Copy the backup file to the ePO 5 server and restore the DB

    Start the 4.5 services

    Use the config page to configure the ePO 4.5 server to use the DB on the ePO 5 server

    Restart the ePO 4.5 services to apply the change

    Make sure that ePO 4.5 is functioning correctly.

     

    Assuming everything's OK, you can now use the migration tool to migrate ePO itself to the ePO 5 server.

     

    HTH -




    (Please post questions to the forum, as I am unable to respond to private messages. Thanks!)



  • JoeBidgood McAfee SME 2,868 posts since
    Sep 11, 2009
    Currently Being Moderated
    8. Sep 10, 2013 10:36 AM (in response to smoggy333)
    Re: HELP ! Migration from ePO 4.5.7 to 5.0.1

    No, the server can have a separate name - you shouldn't have any problems restoring the DB.

     

    HTH -




    (Please post questions to the forum, as I am unable to respond to private messages. Thanks!)



  • rgc McAfee Employee 60 posts since
    May 21, 2013
    Currently Being Moderated
    9. Sep 11, 2013 12:53 AM (in response to smoggy333)
    Re: HELP ! Migration from ePO 4.5.7 to 5.0.1

    Hi Smoggy333,

     

    Additionally information:

     

    ====================

     

    Note: before looking the steps, if you are using the EEPC product, please don't go for upgrade process, since the EPO 5.x not supported any version of EEPC for now.

     

     

    Before moving the db to new server 2008 R2 64bit machine, please make sure, what is the sql version you are going to install on new server.

     

    Let me explain briefly with step by step as below.

     

    1) I need complete answers for the questions as below.

     

    >> EPO 4.5.7 and what is the SQL version and SP and the SQL is full or express edition ?

     

    >. What is the EPO db size ?

     

    >> What are point products managed with existing EPO server  ( Ex: VSE, Agent and so on ) ?

     

    >> How many machines are managed with existing EPO server ?

     

    >> What is the Agent version and patch and VSE version and patch and if any other products please share the versions details.

     

    2) Based on the above information I can guide you the right way and easiest path to move EPO 5.0.1.

     

    3) The minimum environmnet supported with EPO 5.x as below.

     

    Windows 2008 R2 64bit OS.

     

    SQL 2008 R2 or later. Full /Express.

     

    Minimum ePolicy Orchestrator upgrade versions

     

    Only these existing ePolicy Orchestrator versions can upgrade to ePolicy Orchestrator 5.0:

     

    • ePolicy Orchestrator 4.5 Patch 6 or later

     

    • ePolicy Orchestrator 4.6 Patch 4 or later

     

    4) Based on the minimum environment supproted, as you are with EPO 4.5.7 and planning to move to epo 5.x on new server wih windows 2008 R2.

     

    But, I'm not sure the sql version for existing EPO server.

     

    >> Install the sql 2008 R2 express/full version on new server for EPo 5.x, and from existing EPO, you can open the sql management studio and do the EPO DB dettach and then copy the mdf and ldf file to new server and click on attach and browse the files path.

     

    >> This will move the DB to new server, but here we have update epo configuration file to point the new server IP and ports using for communication and the credentails to access DB to contact db on remote server.

     

    >> This task is bit tricky, as you may face atleast some errors or may miss some options, so I suggest to follow the attached document with screenshots for step by step procedure.

     

    >> The document will help to follow the complete steps to move the DB to remote or local server, as steps are same as per document.

     

    >> Once the db is accessible and epo is contacting to remote server for db connection, then I suggest to check the number of files in "ePOlicy Orchestrator" folder.

     

    Note: If you right click on "ePolicy orchestrator" Folder and if the files are more than 65000, then you have to delete files and make sure the number is not exceed before running the migration tool.

     

    For more information check the KB78519 and direct link as below.

    https://kc.mcafee.com/corporate/index?page=content&id=KB78519

     

     

    Then ran the upgrade compatibility tool and then extract the "Migrate.zip" on new server.

     

    >> The upgrade compatibility tool just does the same as per KB71078, and for some reason if you failed to perform this task, I suggest to follow the KB71078 and direct link below.

     

    https://kc.mcafee.com/corporate/index?page=content&id=KB71078

     

    >> By following this Kb, you have install the same version of EPo on new server and follow the article.

    >> This helps to move the existing EPo to move from 32 to 64 bit OS.

     

    >> If you follow the article, with each and every option as suggested, you won't get any errors and we tried internally couple of times and it is successful as per the article.

     

    NOTE: Attached the pdf with some scenarios for the upgrade /migrate epo from 4.x to 5.x, please check the pdf for more information and complete details.

     

     

    Regards,

    Raghavendra GC

     

    Message was edited by: rgc on 9/11/13 12:53:21 AM CDT
1 2 Previous Next

More Like This

  • Retrieving data ...

Bookmarked By (1)

Legend

  • Correct Answers - 5 points
  • Helpful Answers - 3 points