Updating SQL Express 2017 database used by Endpoint Protection Manager to address Microsoft SQL vulnerabilities

Products

• Endpoint Protection

Issue/Introduction

The SQL Express 2017 installed as the default database with Symantec Endpoint Protection Manager (SEPM) 14.3 RU1 or later needs to be updated to address a vulnerability or defect.

Environment

SEPM 14.3 RU1 or later
SQL Express 2017

Resolution

Follow the Preparing for Disaster Recovery before updating SQL Express so you have a SEPM backup in the event of a SQL Express upgrade failure.

Updating SQL Express to address vulnerabilities or defects is supported. If you need assistance with upgrading the SQL Express Server, contact Microsoft.  Below is a general outline of the steps to upgrade the SQL Express version the SEPM uses.

1. Logout from the SEPM.
2. Launch the SQL Express installer (Downloaded from Microsoft).
3. Choose Custom installation type.
4. Pick a Media download location (to save the SQL Express installer files).
5. Choose Upgrade from a previous version of SQL Server.
6. On the Select Instance page, choose SQLEXPRESSSYMC.
7. Complete the install.

After manually upgrading the SQL Express Server used by the SEPM, if the SEPM needs to be uninstalled, the uninstall routine may not successfully remove the updated SQL Express Server and it'll need to be removed manually.