Shulou(Shulou.com)06/01 Report--

Recently, I am working on SEP upgrade, so I would like to post a summary to share with you.

Step 1: the client patches the root certificate and distributes and deploys it with group policy or other methods (this patch is called 436kb). Some of the problems found in the test (2 were found when testing and upgrading 10 hosts), some host client updates will fail. The reason for this installation phenomenon should be that XP support stops and some hosts do not update the root certificate automatically. This can be downloaded and installed manually at:

Http://www.microsoft.com/en-us/download/details.aspx?id=39802

Download the certificate and install it.

The reasons why you need to update the root certificate in the SEP12.1 version upgrade are summarized as follows:

Because some Windows shared libraries (.dll) are used in SEP12.1, in order to verify the security of those .dll, we must verify the certificate signature to ensure that the dll is legal and has not been tampered with. This certificate is issued by a third-party security certificate authority (Verisign) and is used for verification on Windows. So the certificate needs to be updated. If the client does not install the root certificate, the upgrade fails when updating the client, as shown in the following figure

Step 2: back up the database

Step 3: back up the server certificate

Step 4: stop the SEPM service

At this point, all the preparatory work has been completed, and then start to run the program directly to upgrade.

The first time the upgrade program runs, you need to restart the system.

Check that the relevant conditions are met before installation

If you follow the relevant precautions, the success rate is basically guaranteed.

You need to activate the product with the serial number of the new version.

At this point, the upgrade server-side upgrade is complete, and then upgrade the client.

Before upgrading the client, set up to delete any software packages assigned to the client group. If you deploy the client software package that does not use "keep existing client features on upgrade", you must delete these packages, otherwise the client upgrade installation will report the error shown in the following figure.

How to ensure that the client upgrade and installation is completed smoothly is very important. All clients can not be upgraded at the same time, which will seriously affect the network bandwidth of the company. The way is to first establish a grouping and temporarily create some new groupings, for example: 10 clients are divided into one group and 10 are upgraded at noon every day.

Then add the installation software upgrade package to the group, and make the relevant settings. After adding, all clients in this group will automatically download and install the upgrade client software from the server, and the automatic upgrade does not require human intervention.

Can be set to allow users to choose a time to postpone installation

We can set to upgrade and install the client during the noon break, so it is recommended to install silently and restart the system automatically in order to quickly upgrade and install the client.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.