Symantec Data Loss Prevention Upgrade Guide for Windows

1 Symantec Data Loss Prevention Upgrade Guide for Windows Version Last updated: September 14, 2021 Symantec Data Loss Prevention Upgrade Guide for WindowsTable of ContentsPreparing to updates to the Symantec Data Loss Prevention Upgrade preparing to Upgrade Symantec Data Loss Data Loss Prevention Upgrade 7 About the minimum system requirements for upgrading to the current 9 About the requirement for language pack the Oracle database for a Symantec Data Loss Prevention the database update to run the Update Readiness the Update Readiness Tool database the Update Readiness Tool at the command update readiness from SID to from SID to 20 Register the service ORACLE_HOME and PATH 20 Set the ORACLE_HOME and PATH variable on the Oracle database user 21 Backward compatibility for agent requirements and your system for the ICE components from the Enforce ICE response ICE

2 ICE settings in the agent your environment for Microsoft Rights Management file 24 Enabling Microsoft Rights Management file RMS detection for Azure-managed to a new 27 Upgrading Symantec Data Loss and extracting the Upgrade the previous version to a new Enforce Server the Java Runtime Environment on the Enforce an Enforce 29 migrating data on the Enforce 32 Migrate 2 Symantec Data Loss Prevention Upgrade Guide for WindowsMigrate using interactive a previous version detection server to the latest 34 Installing the Java Runtime Environment on a detection a detection data on a detection using silent 37 Migrate using interactive previous version data to a new single-tier 38 Installing the Java Runtime Environment for a single-tier a single-tier data on a single-tier using interactive up your system after that the Enforce Server and the detection servers are the updated configuration to Endpoint Prevent your Endpoint Prevent group directory 44 Upgrading or installing Npcap for Network an Symantec DLP 46 About Symantec Data Loss Prevention Agent secure communications between DLP Agents and Endpoint agent installation installation package with endpoint to Upgrade the DLP Agent on previous version DLP Agents with Windows Safe Mode monitoring 50 Upgrading the Windows agent the Windows agent to Upgrade the DLP Agent on Mac agent Upgrade files.

3 52 About optional maintenance 53 Upgrading the DLP Agent for Mac DLP Agents on Mac endpoints that the Mac agent is gets upgraded for DLP Agents on Mac post- Upgrade 3 Symantec Data Loss Prevention Upgrade Guide for WindowsVerifying Symantec Data Loss Prevention 56 migrating 57 About securing communications between the Enforce Server and the orapki command line orapki to generate the server certificate on the Oracle communication on the Enforce the server certificate on the Enforce the Enforce Server database certificate 61 About remote updating the JRE to the latest to update the 62 Installing the the JRE to the latest version on the JRE using interactive the JRE using silent 64 Reverting a JRE version to a previous the JRE on 64 Starting and stopping 66 About Symantec Data

4 Loss Prevention the Max starting and stopping services on an Enforce Server on an Enforce Server on a detection server on a detection server on services on single-tier Windows 68 Stopping services on single-tier Windows 69 Symantec Data Loss Prevention Upgrade troubleshooting and troubleshooting Symantec Data Loss Prevention Upgrade all Symantec Data Loss Prevention database Enforce Server back to the previous Symantec Data Loss Prevention the Enforce Server to a previous a detection server to the previous 73 Creating the Enforce Reinstallation Resources the Enforce Reinstallation Resources file on a server from a Windows a Maintenance 75 Steps to apply a maintenance pack on Windows 75 4 Symantec Data Loss Prevention Upgrade Guide for WindowsDownloading the maintenance pack software for Windows the Enforce Server on the detection server on a single-tier system on 77 5 Symantec Data Loss Prevention Upgrade Guide for WindowsPreparing to upgradeLearn about preparing to Upgrade the Enforce Server and detection servers on preparing to Upgrade Symantec Data Loss PreventionSymantec Data Loss Prevention Upgrade phasesPreparing the Oracle database for a Symantec Data Loss Prevention upgradeAbout the minimum system requirements for upgrading to the current releaseBackward compatibility for agent upgradesAbout the requirement for language pack upgradesUpgrade requirements and restrictionsPreparing your system for the upgradePreparing your environment for Microsoft Rights Management file monitoringAbout updates to the Symantec Data Loss Prevention Upgrade GuideThis Guide is occasionally

5 Updated as new information becomes available. The latest version is available at RelatedDocuments at the Tech Docs following table provides the history of updates to this version of the Symantec Data Loss Prevention Upgrade Guidefor 1: Change history for the Symantec Data Loss Prevention Upgrade Guide for WindowsDateChange description14 September 2021 Clarified steps for running the non-working September 2021 Clarified that during the silent installation of the Enforce Server and detection servers, the name youenter for the SERVICE_USER_USERNAME must match the user name you used when you installed theprevious version of Symantec Data Loss that backward compatibility does not include support for previous Symantec Data Loss information on deleting previous version OpenJRE files after upgrading to the latest a hyperlink in "Upgrading Symantec Data Loss Prevention " that points to the Symantec DataLoss Prevention Help June 2021 Added recommendation to contact Support for help reading the Update Readiness Tool results prior June 2021 Removed step for entering the Symantec Data Loss Prevention database password when applyingthe MP1 Maintenance Pack on Windows May 2021 Corrected version references when upgrading the JRE using silent mode.

6 6 Symantec Data Loss Prevention Upgrade Guide for WindowsDateChange description16 April 2021 Added information about running the Update Readiness Tool to identify ICE components in the pastversion steps for running the Reinstallation Resources a step to the Upgrade process that directs administrators to back up the system after completing that the Update Readiness tool should be run before the Upgrade process March 2021 Removed steps for using the create_package tool when upgrading DLP Agents on macOS the steps for running the Update Readiness Tool to include the full path to the JRE directory steps for stopping database sessions. You complete this procedure prior to migrating the EnforceServer on three-tier steps for removing non-supported ICE components from the Enforce preparing to Upgrade Symantec Data Loss PreventionTo review the new features for Symantec Data Loss Prevention , see the What's New and What's Changed inSymantec Data Loss Prevention : Related you Upgrade Symantec Data Loss Prevention , you may have different components of the suite on differentversions.

7 Before you Upgrade to , Upgrade Symantec Data Loss Prevention components to if you are or up your database before any Upgrade . See the Symantec Data Loss Prevention Oracle 19c Implementation Guidefor more information (available at Related Documents).Related LinksUpgrade requirements and restrictions on page 22 Symantec Data Loss Prevention Upgrade phasesAn Upgrade is performed in the phases that are described in the table Symantec Data Loss Prevention Upgrade phases. 7 Symantec Data Loss Prevention Upgrade Guide for WindowsTable 2: Symantec Data Loss Prevention Upgrade phasesPhaseActionDescription1 Review important information about the new release beforestarting the Upgrade , including: Known release issues Minimum system requirements Language pack requirements What's New and What's ChangedSee the Symantec Data Loss Prevention ReleaseNotes at Related Documents to learn about any knownupgrade issues or issues with the current release ofSymantec Data Loss What's New and What's Changed at RelatedDocuments for information about new and changedfeatures in Symantec Data Loss the minimum system requirements for upgrading tothe current releaseAbout the requirement for language pack upgrades2 Prepare the system for upgrading.

8 This preparationincludes the following items: Back up the Oracle database and detection serverdata. If the Upgrade fails you can use these backups torestore your system. Prepare and run the Update Readiness Tool. If you findissues, fix them before you migrate your data to Create the Enforce Reinstallation Resources file. Review backwards compatibility details. Review Upgrade requirements and restrictions. Prepare your system for the the Oracle database for a Symantec Data LossPrevention upgradeSee the Symantec Data Loss Prevention SystemMaintenance Guide for more information on backing up thedatabase (available at Related Documents).Checking the database update readinessCreating the Enforce Reinstallation Resources fileBackward compatibility for agent upgradesUpgrade requirements and restrictionsPreparing your system for the upgrade3 Remove ICE components from the Enforce ICE components from the Enforce Server4 Download and extract the version and extracting the Upgrade software5 Upgrade the Enforce Server, which includes the followingsteps: Install the Java Runtime Environment.

9 Install the version Enforce Server. Migrate the previous version to the version the previous version to a new Enforce ServerinstallationMigrating previous version data to a new single-tierinstallation6 Upgrade detection servers, which includes the followingsteps: Install the Java Runtime Environment. Install the version detection server. Migrate the previous version to the version a previous version detection server to the latestversion7 Back up your up your system after upgrade8 Upgrade Symantec Data Loss Prevention : Before you Upgrade agents to , upgradeSymantec Data Loss Prevention components to if youare running or Symantec DLP Agents9 Upgrade any your scanners10 Complete the required and optional post- Upgrade post- Upgrade tasks 8 Symantec Data Loss Prevention Upgrade Guide for WindowsAbout the minimum system requirements for upgrading to the currentreleaseThe free disk space requirements for upgrading an existing Symantec Data Loss Prevention installation depend on theserver type: Enforce Server single-, two-, or three-tier installation.

10 50 GB (for small/medium enterprise) to 100 GB (for large/verylarge enterprise) of free disk space on the volume where the server is installed. Detection server: 750 MB of free disk space on the volume where the server is numbers refer to the free disk space that is needed for the Upgrade process, not the disk space thatis required for server operation. For server disk space, operating system, and other requirements, see theSymantec Data Loss Prevention System Requirements and Compatibility Guide at Related LinksAbout preparing to Upgrade Symantec Data Loss Prevention on page 7 About the requirement for language pack upgradesSymantec Data Loss Prevention requires version-specific language packs. The Upgrade process removes all olderlanguage packs and rolls the user interface back to the English-language default. After the Upgrade , you must downloadand add new versions of each language pack as needed.