How to Move Symantec Endpoint Encryption Client Computers to a New Management Server

Products

• Endpoint Encryption

Issue/Introduction

It is necessary to move the Symantec Endpoint Encryption (SEE) Management Server (SEEMS) to a new machine, or the SEEMS needs to be rebuilt.

After moving the server or rebuilding the server, the clients can no longer connect to the management server.

Resolution

1. From the new Manager, deploy a new Client Framework.msi and Client Full Disk.msi package.  Save the deployment packages in a shared location that the client computer can connect to.

2. Locate the OTP Key changer.msi on the installation media, and install it on the new manager.

 

3. On the new manager, navigate to (default location) %Program Files%\Symantec\Symantec Endpoint Encryption Manager\OTP Key Changer\ and run OTPKeyChanger.exe.  This will create 2 .msi client deployment packages.  Save these packages in a shared location that the client computer has access to. 

 

4. On the client machine, run the OTP key changer that was created in step 3 that corresponds to your Windows operating system (32-bit or 64-bit).

 

5. On the client machine, run the Client Framework and Client Full Disk installers using the syntax required for an upgrade as follows:

 

msiexec /i "Symantec Endpoint Encryption Framework Client.msi" reinstall="ALL" reinstallmode="VOMUS"
 

msiexec /i "Symantec Endpoint Encryption Full Disk Edition Client.msi" reinstall="ALL" reinstallmode="VOMUS"

 

 

6. Reboot machine, log on, open the Client GUI and test connectivity by hitting the Check-In Now button.  Verify that the communication was successful

 

7. On the new Manager, confirm that the client computer connected by locating it in the interface.