Upgrade Symantec Endpoint Encryption 11.0.x Clients to a later 11.0.x version

book

Article ID: 178470

calendar_today

Updated On:

Products

Endpoint Encryption

Resolution

This article describes the process to upgrade Symantec Endpoint Encryption (SEE) 11.0.x clients to another SEE 11.0.x version

NOTE: This process DOES NOT apply to Symantec Endpoint Encrytpion version 11.1.0 and above. Please refer to the upgrade guide for your version for this process.

Upgrade Symantec Endpoint Encryption 11.0.x clients (Endpoint Encryption Management Agent, Drive Encryption, Removable Media Encryption, and optionally Autologon) to a later version by running the installer using the msiexec command.

Client installer packages: location and names

  • The new 11.0.x packages are installed in the same installation folder where the previous 11.0.x packages were installed.
  • The new 11.0.x Management Agent, Drive Encryption, and Removable Media Encryption package names must match the respective package names of the previous 11.0.x version.

    Note: These names are defined when the administrator creates the client installers on the Management Console.
     

Required update method

  • You must use the use the command line interface msiexec command to upgrade the clients. You cannot double-click the client MSI files.
  • The msiexec command must be run using and account with administrative rights.
     

Prior to upgrading

Before upgrading a client computer, take the following precautions to ensure data integrity.

  1. Save all of your work and close any open files.
     
  2. If Removable Media Encryption is installed:
     
    • Close any third-party programs that read and write to removable media.
    • Dismount and disconnect any removable media from the client computer.
       
  3. If Drive Encryption is installed:
     
    • Close any third-party programs that read or write to the disk.
    • Ensured that the disk is either completely encrypted or decrypted. If encryption or decryption is in progress, wait until the disk is completely encrypted or decrypted.
       

Upgrade Sequence

To successfully upgrade clients, you must upgrade the clients in the following order:

  1. Management Agent
     
  2. Removable Media Encryption
     
  3. Drive Encryption
     

Note: If the Removable Media Encryption functionality is not installed on the client computer, first upgrade the Management Agent, followed by Drive Encryption.
 

To upgrade Symantec Endpoint Encryption 11.0.x on the client computer

  1. To upgrade the Management Agent, run the following command:

    % msiexec /i <filename>.msi REINSTALLMODE="vemus" REINSTALL="Complete" /qn /norestart /Live "install.log” where the <filename> is one of the following:
     
    • On 32-bit client operating systems use the SEE Management Agent Client.msi file.
    • On 64-bit client operating systems use the SEE Management Agent Client_x64.msi file.
       
  2. To upgrade Removable Media Encryption, run the following command:

    % msiexec /i <filename>.msi REINSTALLMODE="vemus" REINSTALL="Complete" /qn /norestart /Live "install.log” where the <filename> is one of the following:
     
    • On 32-bit client operating systems use the SEE Removable Media Encryption Client.msi file.
    • On 64-bit client operating systems use the SEE Removable Media Encryption Client_x64.msi file.
       

    Note: If Removable Media Encryption is the last client .MSI to be upgraded, do not include the ‘/norestart’ parameter in the command.

  3. To upgrade Drive Encryption, run the following command:

    % msiexec /i <filename>.msi REINSTALLMODE="vemus" REINSTALL="Complete" /qn /Live "install.log” where the <filename> is one of the following:
     
    • On 32-bit client operating systems use the SEE Drive Encryption Client.msi file.
    • On 64-bit client operating systems use the SEE Drive Encryption Client_x64.msi file.
       
  4. (Optional) To upgrade Autologon, run the following command:

    % msiexec /i <filename>.msi REINSTALLMODE="vemus" REINSTALL="Complete" /qn /Live "install.log” where the <filename> is one of the following:
     
    • On 32-bit client operating systems use the Autologon NoAutologon.msi or Autologon Infinite <dd mmm yyyy>.msi file.
    • On 64-bit client operating systems use the Autologon NoAutologon_x64.msi or Autologon Infinite <dd mmm yyyy>_x64.msifile.