Symantec Endpoint Protection Manager upgrade fails when upgrading ADC policies

Products

• Endpoint Protection

Issue/Introduction

When upgrading the SEPM (Symantec Endpoint Protection Manager) and upgrading database schema you see the following status:

Initializing...Done
Upgrading Database Schema....
Coalescing contents...
Error occurred

Upgrade-0.log entries around ADC policies upgrade stop short with a warning:

INFO: upgradeADCPolicies>> Started.
INFO: upgradeADCPolicies>> domainId:[HEX_STRING] startIndex:1 policyBatchSize:50 morePolicies:true
WARNING: Upgrade> updateTransactionLogFileSize>> final log size is 16384

Environment

Symantec Endpoint Protection Manager

Cause

This failure is due to a large number/size of ADC (Application and Device Control) policies in SEPM database and a large default batch size (50) used in the upgrade.

Resolution

SEPM version 14.3 RU6 added the ability to configure the batch size used in upgrades. To successfully finish the upgrade in this scenario, edit the SEPM's conf.properties file to include "scm.adc.policy.batch.size=5" and restart schema upgrade by running [SEPM]\bin\upgrade.bat