Symantec Data Loss Prevention Upgrade Guide for Windows

1 Symantec data loss Prevention Upgrade Guide for Windows Version Last updated: April 14, 2022 Symantec data loss Prevention Upgrade Guide for WindowsTable of ContentsPreparing to updates to the Symantec data loss Prevention Upgrade preparing to Upgrade Symantec data loss data loss Prevention Upgrade 7 Preparing the oracle database for a Symantec data loss Prevention the database update to run the Update Readiness the Update Readiness Tool database the Update Readiness Tool from the Enforce Server administration the Update Readiness Tool at the command update readiness from SID to from SID to 18 Register the service ORACLE_HOME and PATH 19 Set the ORACLE_HOME and PATH variable on the oracle database user 19 About the minimum system requirements for upgrading to the current Upgrade backward compatibility for agents and the requirement for language pack requirements and your system for the external storage for incident your environment for

2 Microsoft Rights Management file 23 Prepare the AD RMS environment for RMS 23 Prepare the Azure RMS environment for RMS to a new 25 Upgrading Symantec data loss and extracting the Upgrade the previous version to a new Enforce Server the Java Runtime Environment on the Enforce an Enforce 27 Update the file if running oracle 31 Running the Migration Utility on the Enforce 2 Symantec data loss Prevention Upgrade Guide for WindowsMigrating a previous version detection server to the latest 32 Installing the Java Runtime Environment on a detection a detection the Migration Utility on a detection previous version data to a new single-tier 36 Installing the Java Runtime Environment for a single-tier a single-tier the Migration Utility on single-tier data data using interactive that the Enforce Server and the detection servers are the updated configuration to Endpoint Prevent your Endpoint Prevent group directory 42 Upgrading WinPcap or installing Npcap for Network an Symantec DLP 44 About Symantec data loss Prevention Agent secure communications between DLP Agents and Endpoint agent installation 45 Agent installation package with endpoint to Upgrade the DLP Agent on previous version DLP Agents with Windows Safe Mode monitoring 50 Upgrading the Windows agent the Windows agent to Upgrade the DLP Agent on Mac agent 52 Upgrading the DLP Agent for Mac 53 Upgrading DLP Agents on Mac endpoints that the Mac agent is gets for DLP Agents on Mac post- Upgrade Symantec data loss Prevention 56 Enabling Microsoft Rights Management file 57 Enabling RMS detection for Azure-managed RMS detection for AD-managed 58 3 Symantec data loss Prevention Upgrade Guide for WindowsAbout securing communications between the Enforce

3 Server and the orapki command line orapki to generate the server certificate on the oracle communication on the Enforce the server certificate on the Enforce the Enforce Server database certificate 63 About remote updating the JRE to the latest to update the 64 Backing up the cacerts 65 Installing the the JRE to the latest version on the JRE using interactive the JRE using silent CA a JRE version to a previous the JRE on 67 Starting and stopping 68 About Symantec data loss Prevention the Max starting and stopping services on 69 Starting an Enforce Server on an Enforce Server on a detection server on 70 Stopping a detection server on services on single-tier Windows services on single-tier Windows data loss Prevention Upgrade troubleshooting and troubleshooting Symantec data loss Prevention Upgrade Enforce Server back to the previous Symantec data loss Prevention the Enforce Server to a previous a detection server to the previous 74 Creating the Enforce Reinstallation Resources the Enforce Reinstallation Resources file on a server from a Windows a Maintenance 76 Steps to apply a maintenance pack on Windows 76 Downloading the maintenance pack software for Windows 4 Symantec data loss Prevention Upgrade Guide for WindowsUpdating the Enforce Server on the detection server on a single-tier system on 79 5 Symantec data loss Prevention Upgrade Guide for WindowsPreparing to upgradeLearn about preparing to Upgrade the Enforce Server and detection servers on preparing to Upgrade Symantec data loss PreventionSymantec data loss Prevention Upgrade phasesAbout the minimum system requirements for upgrading to the current releaseAbout the requirement for language pack upgradesPreparing the oracle database for a Symantec data

4 loss Prevention upgradeSupported Upgrade backward compatibility for agents and serversUpgrade requirements and restrictionsPreparing your system for the upgradeDeleting ICE components from the Enforce ServerPreparing your environment for Microsoft Rights Management file monitoringAbout updates to the Symantec data loss Prevention Upgrade GuideThis Guide is occasionally updated as new information becomes following table provides the history of updates to this version of the Symantec data loss Prevention Upgrade Guidefor 1: Change history for the Symantec data loss Prevention Upgrade Guide for WindowsDateChange description14 April 2022 Added steps for backing up and reinstating the cacerts file during the OpenJRE update September 2021 Corrected steps for running the Reinstallation Resources March 2021 Added steps for installing that custom scripts and custom plugins are not moved to the new instance during the the location where the Symatec-provided JRE installation files are September 2020 Indicated that /tmp/MacInstaller is the required location from where the create_package should berun on macOS and requirement to convert database to SecureFiles July 2020 Added steps for applying the latest file.

5 Applying the latestfile is required for users running the oracle 19c database who plan to Upgrade to Symantec data LossPrevention version preparing to Upgrade Symantec data loss PreventionTo review the new features for Symantec data loss Prevention , see the What's New and What's Changed inSymantec data loss Prevention : Related can Upgrade from Symantec data loss Prevention version or later to the latest version. From Symantec DataLoss Prevention you can Upgrade to version , then to the latest version. 6 Symantec data loss Prevention Upgrade Guide for WindowsSymantec data loss Prevention enables you to Upgrade version detection servers in stages, while still usingnon-upgraded detection servers to monitor and prevent confidential data loss . To Upgrade to version , you begin byupgrading the Enforce Server. The upgraded Enforce Server can communicate with version detection servers forthe purpose of recording new incidents and preventing confidential data loss .

6 You can schedule the remaining detectionserver upgrades for a time that minimizes service interruption, with certain you are running DLP Agents on version , Upgrade them to before you Upgrade detection servers tothe latest Symantec data loss Prevention version. Version agents cannot communicate with version requirements and restrictionsBack up your database before any Upgrade . See the Symantec data loss Prevention oracle 12c Standard Edition 2 Release 2 Installation and Upgrade Guide for more information (available at Related Documents). Symantec data loss Prevention Upgrade phasesAn Upgrade is performed in the phases described in the table Symantec data loss Prevention Upgrade 2: Symantec data loss Prevention Upgrade phasesPhaseActionDescription1 Review important information about the new release beforestarting the Upgrade , including: Known release issues. Minimum system requirements. Language pack requirements.

7 What's New and What's the Symantec data loss Prevention ReleaseNotes at Related Documents to learn about any knownupgrade issues or issues with the current release ofSymantec data loss What's New and What's Changed at RelatedDocuments for information about new and changedfeatures in Symantec data loss Prevention .About the minimum system requirements for upgrading tothe current releaseAbout the requirement for language pack upgrades2 Prepare the system for upgrading. This preparationincludes the following items: Back up the oracle database and detection serverdata. If the Upgrade fails you can use these backups torestore your system. Prepare the Update Readiness Tool. Create the Enforce Reinstallation Resources your system for the upgrade3 Download and extract the version and extracting the Upgrade software4 Upgrade the Enforce Server, which includes the followingsteps: Install the Java Runtime Environment.

8 Install the version Enforce Server. Run the Update Readiness Tool. If you find issues, fixthem before you migrate your data to version Update file (ifrunning oracle 19c). Migrate the previous version to the version previous version data to a new Enforce ServerinstallationMigrating previous version data to a new single-tierinstallation 7 Symantec data loss Prevention Upgrade Guide for WindowsPhaseActionDescription5 Upgrade detection servers, which includes the followingsteps: Install the Java Runtime Environment. Install the version detection server. Migrate the previous version to the version a previous version detection server to the latestversion6 Upgrade Symantec data loss Prevention : If you are running DLP Agents on version , Upgrade them to before you Upgrade detection serversto the latest Symantec data loss Prevention agents cannot communicate with detection Symantec DLP Agent Endpoint management7 Upgrade any your scanners8 Complete the required and optional post- Upgrade post- Upgrade tasksPreparing the oracle database for a Symantec data loss PreventionupgradeThe following oracle -related preparations must be made before you Upgrade the Symantec data loss Preventiondatabase schema for version :Table 3: Preparing the oracle database for upgradeStepActionDescription1 Back up the oracle database before you start the Upgrade .

9 You cannotrecover from an unsuccessful Upgrade without a backup of your the Symantec data loss Prevention Oracle12c Standard Edition 2 Release 2 Installation andUpgrade Guide at Related the Update Readiness Tool to confirm that the oracle database isready to Upgrade to Symantec data loss Prevention version the database update readiness3 Switch the oracle SID to SERVICE_NAME if you are upgrading fromSymantec data loss Prevention version through Theseversions use the oracle SID. You cannot complete the upgradeprocess if you do not switch to the SERVICE_NAME : If you are running a fresh installation of version that wasdownloaded on or after 21 September 2018, you can skip this version uses the SERVICE_NAME by from SID to SERVICE_NAME4 Set ORACLE_HOME and PATH ORACLE_HOME and PATH variables5 Confirm that the database user has permissions to connect to theEnforce the oracle database user permissionsPreparing your system for the upgradeChecking the database update readinessYou use the Update Readiness Tool to confirm that the oracle database is ready to Upgrade to the next Symantec DataLoss Prevention can run the Update Readiness Tool while Symantec data loss Prevention continues to run.

10 8 Symantec data loss Prevention Upgrade Guide for WindowsSymantec recommends that you prepare for the Upgrade , including running the Update Readiness Tool, a few weeksbefore you plan to complete the Upgrade process. Preparing helps ensure that any issues that arise can be resolvedbefore the scheduled completion Update Readiness Tool tests the following items in the database schema: oracle version oracle patches Permissions Tablespaces Existing schema against standard schema Real Application Clusters Change data Capture Virtual columns Partitioned tables Numeric overflow Temp oracle spaceUsing the Update Readiness Tool lists tasks you complete to run the 4: Using the Update Readiness ToolStepTaskDetails1 Prepare to run the Update Readiness to run the Update Readiness Tool2 Create the Update Readiness Tool the Update Readiness Tool database account3 Run the can run the tool for the following scenarios.