Enforce Quick Upgrade Guide for Windows

Products

• Data Loss Prevention
• Data Loss Prevention API Detection for Developer Apps Virtual Appliance
• Data Loss Prevention API Detection Virtual Appliance
• Data Loss Prevention Cloud Detection Service
• Data Loss Prevention Cloud Detection Service for ICAP
• Data Loss Prevention Cloud Detection Service for REST
• Data Loss Prevention Cloud Package
• Data Loss Prevention Cloud Prevent for Microsoft Office 365
• Data Loss Prevention Cloud Service for Discovery/Connector
• Data Loss Prevention Cloud Service for Email
• Data Loss Prevention Cloud Storage
• Data Loss Prevention Core Package
• Data Loss Prevention Data Access Governance
• Data Loss Prevention Discover Suite
• Data Loss Prevention Endpoint Discover
• Data Loss Prevention Endpoint Prevent
• Data Loss Prevention Endpoint Suite
• Data Loss Prevention Enforce
• Data Loss Prevention Enterprise Suite
• Data Loss Prevention for Mobile
• Data Loss Prevention for Office 365 Email and Gmail with Email Safeguard
• Data Loss Prevention Form Recognition
• Data Loss Prevention Network Discover
• Data Loss Prevention Network Email
• Data Loss Prevention Network Monitor
• Data Loss Prevention Network Monitor and Prevent for Email
• Data Loss Prevention Network Monitor and Prevent for Email and Web
• Data Loss Prevention Network Monitor and Prevent for Web
• Data Loss Prevention Network Prevent for Email
• Data Loss Prevention Network Prevent for Email Virtual Appliance
• Data Loss Prevention Network Prevent for Web Virtual Appliance
• Data Loss Prevention Network Protect
• Data Loss Prevention Network Web
• Data Loss Prevention Oracle Standard Edition 2
• Data Loss Prevention Plus Suite
• Data Loss Prevention Sensitive Image Recognition

Issue/Introduction

This is a Quick Upgrade Guide for the Data Loss Prevention Enforce Server.

For the full "DLP Quick Upgrade Guides" please visit the following link: DLP Quick Upgrade Guide.

Environment

Windows

Resolution

VERSION DISCLAIMER: Please note that the following instructions are version agnostic, and can generally be used on any currently supported version. As such, you will find several variables denoted such as "<DLPversion>" to indicate where a version number "should" be used. You will need to replace these variables with the appropriate version that you are attempting to use. Below are a few examples of such translations... <DLPversion>  = 15.8, 16.0, 16.0.1 or 16.0.2 <DLPfullversion>  = 16.0.10000.60631 <ORACLEversion>  = 193000 or 19.3.0.0 <JREversion> = jdk8u322-b06 or 8u322b06

 

Download Installers: https://support.broadcom.com/group/ecx/downloads
DLP Platform Installer: Symantec_DLP_<DLPversion>_Platform_Win-IN_<DLPfullversion>.zip
Oracle Client Installer: WINDOWS.X64_<ORACLEversion>_client.zip
     ** The Oracle Client MUST be installed if Oracle is not installed locally on the Enforce Server.
     ** The Oracle Client version MUST match the Database version.
     ** If upgrading the Oracle client you must uninstall the current version, then reinstall the updated version.

Install New Version of Java:
     Java AdoptOpenJRE Quick Install Guide

Update the Oracle 19c Client:
     Oracle 19c Client Quick install Guide

Update the Environment Variables:
     Creating Environment Variables Quick Install Guide

Stop any running Oracle Jobs:
     - Run the following SQL statement on your Oracle Database:

     select count(*) from user_jobs;

If the job's are not 0 refer to the following...
Stopping Oracle Database Jobs

 

Run the UpgradeReadinessTool:
     Quick URT Guide

Install the new version of the Enforce Server:
     ** Note: This is a parallel installation and will exist at the same time as the previous version of DLP.
     Enforce Quick Install Guide for Windows: Enforce Quick Install Guide for Windows

Run the Migration Phase:
     1. Open CMD(as administrator)
     2. Change to the "Migrator" directory
          cd C:\Program Files\Symantec\DataLossPrevention\EnforceServer\<DLPversion>\Protect\Migrator
     3. Run the Migration "migrateEnforce.bat"
          migrateEnforce.bat


Confirm the JRE Path: y

Proceed with Phase 1 Migration: y
Select a Source Installation: 1

Proceed with Phase 2 Migration: y

Confirm Migration was successful:

If the Migration failed, check the "migrationutility.log" for more details:
     C:\ProgramData\Symantec\DataLossPrevention\EnforceServer\<DLPversion>\logs\debug\migrationutility.log

Once successfully completed, login to the Enforce Console to confirm upgrade.

You will have an initial page for the EULA.

All 3 fields are required to be able to select "I Accept" , Once populated select "I Accept" and your home page will load.

Navigate to "System -> Server and Detectors -> Overview". 

You will see your DLP Enforce Server is now upgraded to DLP 16.0.