Symantec Control Compliance Suite (CCS) - 11.0 Agent support on Windows 2012

Products

• Control Compliance Suite Exchange
• Control Compliance Suite Windows

Issue/Introduction

This Symantec™ Control Compliance Suite (CCS) 11.0 Agent provides support for data collection on Windows Server 2012.
Symantec has released a new CCS 11.0 Agent setup with support for Windows Server 2012
LInk to download CCS 11.0 agent
http://www.symantec.com/avcenter/security/CCS/pgu/2013.05.09/CCS%2011.0%20Agent%20Installer.zip

Resolution

Raw data collection

The prerequisites for raw based data collection from Windows 2012 Agent are as follows:

• Control Compliance Suite version 11.0
• PU 2013-2
  Click here to download PU 2013-2.
• SCU 2013-1
  Click here to download SCU 2013-1.

Perform the following steps to collect raw data for Windows 2012 targets:

1. Install the new CCS Agent.
2. Install the raw data content on CCS Agent using the ccstpk.exe file or run the Agent content update job after you install SCU 2013-1.
   Click here to download the ccstpk.exe

Message based data collection

The prerequisites for message based data collection from Windows 2012 Agent are as follows:

• Control Compliance Suite version 11.0
• PU 2013-2
  Click here to download PU 2013-2.
• SCU 2013-1
  Click here to download SCU 2013-1.
• ESM Console 11.0
• ESM Manager 11.0 on UNIX

 

Perform the following steps for message based data collection from Windows 2012 Agent

 

1. Apply the ESM Console update
2. Apply the ESM Manager update on UNIX
3. Install the new CCS Agent
4. Install the message based content on CCS Manager
5. Install the message based content on CCS Agent

 

Apply the ESM Console update

1. Click the following link to download the ESM Console update.
   ESM Console update.zip
2. Extract the zip file to a known location.
3. Close the running instances of ESM Console.
4. Take a backup of the following files, if they exist, and then replace the existing files or copy the new files at location:

 

Filename	Location
esm.exe	<Installdir>\Enterprise Security Manager\Symantec ESM Enterprise Console
ConsoleResources.dll	<Installdir>\Enterprise Security Manager\Symantec ESM Enterprise Console
CCSPlatformData.xml	<Installdir>\Enterprise Security Manager\Symantec ESM Enterprise Console

5. Launch the ESM Console.

Apply the ESM Manager update on UNIX

1. Click the following link to download the ESM Manager update.
   ESM Manager update on UNIX.zip
2. Extract the zip file to a known location.
3. On the ESM Manager computer, stop the ESM Manager service on UNIX.
4. Take a backup of the following files, if they exist, and then replace the existing files or copy the  new files at location:

 

Filename	Location
esmnetd	/esm/bin/solaris-sparc
esmcifd	/esm/bin/solaris-sparc
importcontent	/esm/bin/solaris-sparc
esmc	/esm/bin/solaris-sparc
CCSPlatformData.xml	/esm/config

 

5. Restart the ESMmanager service.
6. Use the esmcontent.tpk located in the Content package folder to install the ESM Manager content. This adds the following entry into the esm/config/importcontent.conf file on the ESM Manager:
   w12s-ix64
   Uncomment the w12s-ix64entry to install content for the w12s-ix64 platform on the ESM Manager.
   The ESM Manager can now perform data collection from the new platform.

Install the CCS Agent

For information on installing the Agent, see the following sections in the Symantec Control Compliance Suite 11.0 Planning and Deployment Guide:

• Installing the CCS Agent on Windows
• Installing and registering a CCS Agent on Windows in silent mode

 

Note: You can use the same Agent setup to upgrade pre 11.0 (ESM) Agent to CCS 11.0 Agent. The procedure to upgrade an existing Agent is same as the procedure to install the new Agent.

 

For a list of platforms supported by the CCS Agent for data collection, see: http://www.symantec.com/security_response/securityupdates/list.jsp?fid=ccs&pvid=sm

Install the message based content on CCS Manager

Click the following link to download the esmcontenttpk.exe file to install message based data content on the CCS Manager:
message based content package for CCS Manager.zip

This adds the following entry into the <CCS_install_directory>\esm\config\importcontent.conf file on the CCS Manager:

w12s-ix64

Uncomment the w12s-ix64entry to install content for the w12s-ix64 platform on the CCS Manager.

The CCS Manager can now perform data collection from the new platform.

Install the message based content on CCS Agent

Click the following link to download the esmtpk.exe file to install message based data content on the CCS Agent:
message based content for CCS Agent.zip

Applies To

Windows 2012
CCS 11.0