Install and configure LiveUpdate Administrator

Products

• Endpoint Protection
• Endpoint Security
• Endpoint Security Complete

Issue/Introduction

This article describes how to install LiveUpdate Administrator (LUA) for use as an internal LiveUpdate server.

Resolution

LUA is an enterprise web application that lets you manage Symantec updates on an internal LiveUpdate (LU) server.  LUA can be configured to download content for various products such as SEP, DCS, SMS, SPE, etc.  LUA retrieves content from an external Symantec LU server to be published to Distribution Centers where clients can download from.  Content can also be sent to a Testing Distribution Center before publishing so content can be vetted before being released to the entire environment.

 

Background and getting started

• Read LiveUpdate Administrator Best Practices before installing LUA
• Review LUA system requirements at LiveUpdate Administrator release notes and new fixes
• Obtain the latest version of LUA from Download LiveUpdate Administrator

Install LUA

1. Launch the LUA installer (LUAESD_.exe by default) as a user in the local Administrators group
2. Click Next
3. Review and accept the license agreement, and click Next
4. Confirm the installation location and download updates location provided on the Destination Folder screen and click Next
5. Enter a username, password, password confirmation and email address and click Next
6. Click Install, and wait for the installation to complete, then click Finish

When the installation completes, the Apache Tomcat Web server and PostgreSQL database server are also installed. The LUA Apache Tomcat and LUA PostgreSQL services are installed and started so that LUA is ready to. Both services are set to start automatically.

Configure LUA

Update the product catalog

LUA updates the product catalog shortly after installation. If this does not happen, update the product catalog manually:

1. Log in to LUA, and click Configure
2. Click Update Symantec Product Catalog

For more information on updating the LUA product catalog, see Update LiveUpdate Administrator product catalog.

To add a product to the product list

Before you can add content to a download scheduled, distribution center or distribution schedule, first add the product to the product list.

1. Log in to LUA and click Configure
2. Click Add New Products
3. Select the desired product line
4. Check each desired product
5. Click OK.

Create a new download schedule

1. On the Download & Distribute tab, in the Schedules window, click Add Download.
2. In the Add Download Schedule box, enter the following:
   • Distribution schedule name A descriptive name for this schedule.
   • Status Enabled or Disabled
   • Description Enter a description for this schedule.
3. In the "Select Products" box, click Add.
4. Select the products that you want to add to this schedule and then click Add.
5. In the "Available Components" box, click the component you want to add, and then click Add. Or, click Add All to add all of the product components to the schedule.
6. Select the test status that you want to assign to the schedule.
   By default, the test status is set to Skip Test. Set the status to Must Test to test the updates before you publish them.
7. In the Select Schedule box, set the download schedule.
8. Click OK to save the schedule, or click Cancel to cancel this action.
9. To run a manual download request that is based on an existing schedule. In the right pane, under Schedules, select an existing Download Schedule, and then click Run Now.

To run a new manual download request

1. In the left pane, under Scheduling Tasks, click Manual Download Request.
2. In the Manual Download Request - Step 1 of 2 window, select the products you want to add to this request by clicking Add.
3. In the Select products to be added window, select the product or products you want to add and then click OK.
4. Select the test status for this download request: Skip Test or Must Test.
5. Click Next.
6. In the Manual Download Request - Step 2 of 2 window, select the updates that you want to download. You can select all products and components, or you can select specific components such as Software Updates or Virus Definitions.
7. Click Next to start the download request.

To delete a download schedule

1. On the "Download & Distribute/Schedules" list, click the box next to the schedule that you want to delete
2. Click Delete.
3. Click Confirm Delete to finish deleting the schedule or click Cancel to cancel the deletion.

Scheduling Distribution
After you've downloaded your updates, they can be sent to either a testing distribution server, or published to a production distribution server where they can be downloaded by your LiveUpdate clients. When you add a distribution schedule, you also select the products and components that you want to associate with the schedule. This list of products and components is compared with the updates in the Manage Updates folder. Any revisions that are not already published will then be published in the current distribution session.

Note: The added products must also be added to the distribution center/s. This is accomplished through Configure > Distribution Centers, then edit an existing distribution center to add to the Product List.

To add a new distribution schedule

1. On the Download & Distribute tab, in the Schedules window, click Add Distribution.
2. In the Add Distribution Schedule box, enter the following:
   • Distribution Schedule name
   • Status, either Enabled or Disabled
   • Description
3. Select the products and components for which updates will be distributed by clicking Add.
4. In the "Select products to be added" window, select the product or products you want to add to this distribution schedule, and then click Add.
5. In the "Select Product Components" box, select the components that you want to include in the distribution schedule.
6. Click the component name and click Add.
   • Or select all components by clicking Add All.
7. In the "Distribute Content To" box, select the distribution center type, Testing, Production, or both.
8. Select the Distribution Centers. You can select all Distribution Centers, or a subset of the centers.
9. Select a "distribution schedule."
10. Click OK to save the schedule or click Cancel to cancel this action.

To run a manual distribution request based on an existing schedule

1. In the right pane, under Schedules, select an existing Distribution Schedule, and then click Run Now.

To run a new manual distribution request

1. In the left pane, under "Scheduling Tasks", click Manual Distribution Request.
2. In the Manual Distribution Request Step 1 of 2 window, click Add to select the products that you want to distribution with this request.
3. In the Select products to be added window, select the products or the components, then click OK.
4. In the "Manual Distribution Request" Step 1 of 2 window, select the "Distribution Center Type": All, All Production Centers, or All Testing Centers.
5. Select the Distribution Center: All, or Subset.
6. Click Next.
7. In the Manual Distribution Request Step 2 of 2 window, select the updates that you want to distribute, and then click Next.

Optional configurations:
 

• Configure Source Servers: By default, updates are downloaded from one of our LiveUpdate servers. However, you can identify and configure one or more local servers from which LUA can download updates, and designate servers that can be used in case they fail. To add a new source server, click the Configure tab, click Source Servers, and then click Add.
  
  
• Testing definitions: When updates have been tested, they can be then be marked as "passed" and then published to the production distribution center, using a schedule you have determined. You can create a list of products that are associated with the distribution center. All locations in the distribution center will be in sync with the product updates of products configured in the list. For example, if you would like to download only the virus definitions for all of your Symantec products you can select the products, and then specify the Virus Definitions component.
   
• Client Settings Host File: For unmanaged SEP clients, export the client settings host file "Settings.Hosts.LiveUpdate." This is used to configure Windows LiveUpdate clients to download updates from the Distribution Center.  The liveupdt.hst file is used by Java LiveUpdate clients (unmanaged SEP for Macintosh). To generate a host file:
  - On the Configure tab, click Client Settings, and then select the Distribution Center that you want your LiveUpdate clients to use.
  - Click Export Window Settings to export the Settings.Host.LiveUpdate file, or click Export Java Settings to create the Java LiveUpdate client file.
  - Disable Tamper Protection from Client Management Settings.
  - Copy the file to C:\ProgramData\Symantec\Symantec Endpoint Protection\CurrentVersion\Data\Config directory on Windows client computers, or to \Library\Application Support\Symantec\LiveUpdate on Macintosh client computers. When the LiveUpdate client runs, it will use the host file for information on where to download updates.
  - Re-enable Tamper Protection.
  
  Note: If you are using managed Symantec Endpoint Protection 11.0 clients, you can provide the LUA URL to Windows and Macintosh clients via the LiveUpdate policy in the Symantec Endpoint Protection Manager (SEPM).
   

For information on how to perform management tasks on different LUA versions, see the Symantec LiveUpdate Administrator User's Guide from this link.

Note: For specific information on downloading and serving content for Symantec Endpoint Protection for Macintosh clients, please see 151378.

Note: For specific information on downloading and serving content for Symantec Endpoint Protection for Linux clients, please see 162069.