This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Migrating from EM Library 1.3.2 and Enterprise Console 3.1.0.2476 to Enterprise Console 4

Hi,

Has anyone gone through this process in a live environment? Care to share your experience?

Paul

:542


This thread was automatically locked due to age.
Parents
  • Hello pdl,

    not counting the beta I have migrated to management servers and one additional child library early in November so what I say is to the best of my recollection but not necessarily accurate.

    What's new?

    Sophos Update Manager (SUM) which is the successor to EM Library

    - a new user SophosUpdateMgr is created (you will not be asked for a password and if you have only management server this is not a problem. Using SophosUpdateMgr as search term you'll find two articles (61397 and 65318) which could be of interest

    - this new user will also be used by default in the updating policies

    - there could be an issue with this account (see )

    - EM Library will be upgraded to 1.3.3 during the install (and it's install location will change), settings will be migrated

    - SUM uses a new location for the CIDs and a new naming scheme

    Device control

    - the configuration is moved into its own policy (from application control)

    Roles and Sub-estates

    ... and some more. Best Practices contains some useful links.

    Migration Process

    - backup your database (SOPHOS3) and EM Library settings (just in case :smileywink:)

    - When SEC4 is run for the first time it will try to migrate your updating policies. It will work only with "simple" configurations (i.e. no WebCIDs, no FQDNs or IP-adresses and the same CID-host for all platforms, no custom packages). A failed migration is not the end of the world though (you'll have to write the new policies by hand). No change is made to the existing policies and assignments, it continues to run as before.

    - Due to the restructuring of the CIDs and depending on the original policies new Software Subscriptions (which replace the "packages") will be created. This might result in a product downloaded more than once and since EM Library is still present space requirements will increase significantly. Furthermore the download process has changed  and uses some (a lot of?) extra working space - so make sure you have ample free disk space.

    - If you have customised packages or made changes to the CIDs (e.g. mrinit.conf) you have to re-apply the changes

    - do not forget Device Control policies

    Child libraries

    - All Updates Managers can now be managed from the central console (therefore it is expected that the servers running the childs communicate with the parent via RMS)

    - The same share is used for downloads by SUM and client-updates     

    WebCIDs

    - changes to the update location require changes on the webserver

    These are the topics which immediately came to mind. Feel free to ask if you have specific concerns.

    Christian

    :549
Reply
  • Hello pdl,

    not counting the beta I have migrated to management servers and one additional child library early in November so what I say is to the best of my recollection but not necessarily accurate.

    What's new?

    Sophos Update Manager (SUM) which is the successor to EM Library

    - a new user SophosUpdateMgr is created (you will not be asked for a password and if you have only management server this is not a problem. Using SophosUpdateMgr as search term you'll find two articles (61397 and 65318) which could be of interest

    - this new user will also be used by default in the updating policies

    - there could be an issue with this account (see )

    - EM Library will be upgraded to 1.3.3 during the install (and it's install location will change), settings will be migrated

    - SUM uses a new location for the CIDs and a new naming scheme

    Device control

    - the configuration is moved into its own policy (from application control)

    Roles and Sub-estates

    ... and some more. Best Practices contains some useful links.

    Migration Process

    - backup your database (SOPHOS3) and EM Library settings (just in case :smileywink:)

    - When SEC4 is run for the first time it will try to migrate your updating policies. It will work only with "simple" configurations (i.e. no WebCIDs, no FQDNs or IP-adresses and the same CID-host for all platforms, no custom packages). A failed migration is not the end of the world though (you'll have to write the new policies by hand). No change is made to the existing policies and assignments, it continues to run as before.

    - Due to the restructuring of the CIDs and depending on the original policies new Software Subscriptions (which replace the "packages") will be created. This might result in a product downloaded more than once and since EM Library is still present space requirements will increase significantly. Furthermore the download process has changed  and uses some (a lot of?) extra working space - so make sure you have ample free disk space.

    - If you have customised packages or made changes to the CIDs (e.g. mrinit.conf) you have to re-apply the changes

    - do not forget Device Control policies

    Child libraries

    - All Updates Managers can now be managed from the central console (therefore it is expected that the servers running the childs communicate with the parent via RMS)

    - The same share is used for downloads by SUM and client-updates     

    WebCIDs

    - changes to the update location require changes on the webserver

    These are the topics which immediately came to mind. Feel free to ask if you have specific concerns.

    Christian

    :549
Children
No Data