Tuesday, March 24, 2009

Moving Symantec Client Security 3.x or Symantec AntiVirus Corporate Edition 10.x clients from one parent server to another

Question/Issue:
You installed Symantec Client Security 3.x or Symantec AntiVirus Corporate Edition 10.x clients as a managed client of a Symantec AntiVirus server. You want to move one or more clients to a different parent server.


Solution:
Find your situation, and follow the directions.

To change the parent management server of a client manually when the servers are in the same server group
  1. On the intended parent management server, copy the Grc.dat configuration file from the Symantec AntiVirus program folder.
    The default location on a Symantec AntiVirus Corporate Edition server is :\Program Files\SAV.
    The default location on a Symantec Client Security server is :\Program Files\SAV\Symantec AntiVirus.
    For directions, see the "To find the Symantec AntiVirus program folder" section in the Technical Information section of this document.
  2. On the client computer, paste the Grc.dat file into the C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5 folder.
  3. After a few minutes, the client finds the Grc.dat file in this folder, makes the appropriate changes to the registry, and then deletes the Grc.dat file.
    The next time that the client checks in with the parent server, the client will appear in Symantec System Center. You can force the check-in by editing the registry on the client computer.

To change the parent management server of a client manually when the servers are not in the same server group
  1. On the intended parent management server, copy the Grc.dat configuration file from the Symantec AntiVirus program folder.
    The default location on a Symantec AntiVirus Corporate Edition server is :\Program Files\SAV.
    The default location on a Symantec Client Security server is :\Program Files\SAV\Symantec AntiVirus.
    For directions, see the directions in the "To find the Symantec AntiVirus program folder" section in the Technical Information section of this document.
  2. On the client computer, paste the Grc.dat file into the C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5 folder.
  3. On the intended parent management server, open the pki\roots folder and copy the xxx.x.servergroupca.cer file.
  4. On the client computer, paste the xxx.x.servergroupca.cer file into the pki\roots directory, which appears under the directory that contains the Symantec Client Security files.
  5. After a few minutes, the client finds the Grc.dat file, makes the appropriate changes to the registry, and then deletes the Grc.dat file.
    The next time that the client checks in with the parent server, the client will appear in Symantec System Center. You can force the check-in by editing the registry on the client computer.

To force a client to check in with the parent server
  1. On the client computer, start the Registry Editor.
  2. In the left pane, go to the following registry key:

    HKEY_LOCAL_MACHINE\SOFTWARE\INTEL\LANDesk\VirusProtect6\CurrentVersion\ProductControl

  3. In the right pane, double-click the ReloadRootCertsNow value.
    If the value does not exist, create it as a DWORD Value.
  4. In the Value data box, press Backspace, and then type 1
  5. Click OK.
  6. In the right pane, double-click the ReStartPongEngineNow value.
    If the value does not exist, create it as a DWORD Value.
  7. In the Value data box, press Backspace, and then type 1
  8. Exit the Registry Editor.

No comments: