Upgrading to Symantec Encryption Server 3.3.2 MP11 and above may take longer than expected

Products

• Encryption Management Server

Issue/Introduction

Using a PUP file to upgrade to Symantec Encryption Server 3.3.2 MP11 and above on a system containing tens or hundreds of thousands of user and machine records can take much longer than expected.

The Update log will simply show that database schema comparison has started and completed. However, this process can take over an hour to finish:

# grep comparison /var/log/ovid/update-2015-12-09.log
2015/12/09 20:38:22 +08:00  INFO   pgp/update[8946]: MAIN: Start database schema comparison
2015/12/09 21:56:23 +08:00  INFO   pgp/update[8946]: MAIN: Database schema comparison completed successfully

 

Cause

A new database function was introduced in release 3.3.2 MP11 that performs additional checking of local database tables and "metadata" tables. The function is executed as part of the upgrade and can take a considerable time to run when the database is large.

Resolution

Please be aware of this and factor it into the time allocated to complete the upgrade. In particular, testing the upgrade on a Symantec Encryption Server with very few user or machine records will not provide an accurate indication of how long the upgrade may take on a production system containing tens or hundreds of thousands of records.

Please do not restart Symantec Encryption Server in the mistaken belief that the upgrade has failed.