Steps to register Symantec Critical Systems Protection (CSP) Windows Agent to Symantec Data Center Security (DCS) 6.10 Management Server

Products

• Data Center Security Monitoring Edition
• Data Center Security Server
• Data Center Security Server Advanced
• Critical System Protection
• Embedded Security Critical System Protection

Issue/Introduction

Symantec strongly recommends planning and fully migrating over to Symantec Data Center Security solution as soon as possible, but we also recognize replacement of CSP agents can take some time.  In these special cases this KB is intended to provide detailed steps to register and manage CSP Windows Agent with DCS 6.10 Communication Server. 

Environment

Critical Systems Protection 8 (or lower)
Data Center Security 6.10 (or higher)

Resolution

Pre-Requisites  

1. DCS Management and Communication Server 6.10.0 is installed and functional 
2. CSP policy pack is available to import. (CSP policy name is something like “SCSPPreventionPolicyPack-v8.0.0-m8.0.0-20240x0xxx.zip)
3. DCS agent certificate (agent-cert.ssl)

Steps

1. Login to DCS 6.10.0 management Console
    
   
   
2. Go to “policies” tab and “More Actions” and Click “Import”
   [Policies -> “More Actions” -> “Import”]
   
   
3. Select the CSP Policy zip from your CSP installation media, and Click Open 
   
   
4. Now in policies Tab click “Add” and select “Default Policies”
   [Policies -> “Add” -> “default”] 
   
   
5. Choose imported policy pack and CSP policy version is v8.0.0*
    
   
   
6. Now create a “Security Group” something called CSP 
   
   a.    To create Security group go “Security Group” and click Add and configure your CSP Security Group
    
   
   
7. Install the CSP Agent on the machine, or point the existing CSP Agent to DCS 6.10 Communication Server using sisipsconfig tool
   
   Details on the sisipsconfig commands are located here.
   Steps: 

1. 1. Set the host to the DCS Communication Server IP
      sisipsconfig -h <DCS Communication Server IP>
      
      
   2. Change the certificate file to the DCS Certificate with the -certfile (or -c) command followed by the filename and path
      sisipsconfig -certfile "<DCS Manager SSL Certificate>"
      
      
   3. Test the connection
      sisipsconfig -t
      
      Example: