Restore the DLP Enforce Server across platforms in three-tier deployments

Products

• Data Loss Prevention Enforce

Issue/Introduction

Please note:

This article covers the legacy method utilized in DLP 16.1 and previous.
By leveraging the EnforceReinstallationResources.zip in DLP 16.1, you can restore a Symantec Data Loss Prevention (DLP) Enforce configuration and database access onto the same, or different, platform. In three-tier deployments, you install the Oracle database, Enforce Server, and a detection server on separate computers.

DLP 25.1 and newer utilizes the new Enforce Server Live Backup methodology which is a more robust method backing up more than just your encryption keys.

Please see:

Live Backup 25.1

Live Backup 26.1

Recovering the Enforce Server 25.1

Recovering the Enforce Server 26.1

 

Environment

• Windows
• Linux

Ensure that the target OS platform is supported prior to uninstalling DLP Enforce.

Resolution

To migrate your Enforce Server to another OS platform, follow these high-level steps. See the Symantec Data Loss Prevention Installation Guide appropriate to your version for specific instructions on how to create and use the reinstallation resources files, as well as for the appropriate path names. 

1. Stop DLP Enforce services for your specific version

2. On your current Enforce Server, create the EnforceReinstallationResources.zip file.

   1. See Creating the Enforce Reinstallation Resources file

3. Copy the EnforceReinstallationResources.zip file to your new Enforce Server computer.

4. On your new Enforcer Server computer, install the Enforce Server, but do not initialize the Enforce Server database.

5. Use the EnforceReinstallationResources.zip file during the installation procedure to preserve the connection to your existing database. See the chapter "Installing an Enforce Server" in the Symantec Data Loss Prevention Installation Guide for your version for detailed instructions on using reinstallation resources.