ALERT: Some images may not load properly within the Knowledge Base Article. If you see a broken image, please right-click and select 'Open image in a new tab'. We apologize for this inconvenience.

How to manually install Endpoint Protection for Linux

book

Article ID: 172186

calendar_today

Updated On:

Products

Endpoint Protection

Issue/Introduction

Manually installing Symantec Endpoint Protection (SEP) for Linux (rather than running automatic install.sh script) may be useful to ...

  • install SEP using only the RPM files, optionally combined with other configuration management software
  • include custom pre-compiled autoprotect modules or pre-packaged definitions
  • install only the core manual/scheduled scanning and management component (sep-only, minus autoprotect and graphical user interface)
  • troubleshoot a failure of the installation 

Environment

Linux

Resolution

Install development tools on just one Linux machine to create pre-compiled modules if necessary. See Manually compile Auto-Protect kernel modules for Endpoint Protection for Linux. Prior to installing SEP on other Linux machines, copy any prebuilt *.ko modules into /opt/Symantec/autoprotect/ and rather than run the SEP install.sh script use the rpm command line (or dpkg command for *.deb packages) within the SEP "Repository" directory. This method will make no attempt to recompile autoprotect modules from source files and no developer tools need be installed. For example, from root prompt:

mkdir -p /opt/Symantec/autoprotect
cp /path/to/prebuilt/autoprotect/*.ko /opt/Symantec/autoprotect/
cd /path/to/sep-rpm/Repository
export curdir=$(pwd)
rpm -Uhv sep.rpm sepui.rpm sepap-x64.rpm # or sepap.rpm for 32-bit machines. 
# dpgk -i sep.deb sepui.deb sepap-x64.deb on Ubuntu machines

Install only "sep" package for core manual/scheduled scanning and management component, minus autoprotect and user interface.

Include pre-packaged definitions by adding a linuxdefs.zip file to the "Repository" directory. Create this zip file from a current numbered folder on an existing SEP Linux installation, e.g.: 

cd /opt/Symantec/virusdefs/20170929.001
zip .../my/current/defs/linuxdefs.zip *