This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Migrating EC v4 to new server - updates now fail

Good evening,

Recently moved an installation of Sophos EC  v4 from our old server to the new live server. Followed the Sophos Migration guide to the letter (no number just dated June 2010).

Initially tried to move everything from v4 to v4.5 but that did not work. Doh should have engaged brain first, stupid.

Then installed v4.0 on the new server and the migration seemed to go ok. EC started up fine and all the computers were present.

Selected Update Manager and tried to force an update. This went away for a while and then failed. Might have a handle on this as I realised I did not clean out the Sophos Update share between version (v4.5 and v4.0) so I have a plan on how to solve that issues.

Went to a client and tried to get it to update it failed with 'Could not connect to server'. From memory its running EP 9.0

On checking the configuration of the update I noticed it uses SophosUpdateMgr as the user with a hidden password. Now my understanding is that the EC will create this user with a random password when it is installed if it does not already exist. Does this then get changes when I restore the registry / certificates / database  or do I have to invade the AD on the old server to find the password and then set it on the new and run the Sophos 'hide' it etc.?

If its not that can anyone please provide a pointer to the probable cause of the problem.

Regards

Gary

:5531


This thread was automatically locked due to age.
Parents
  • Thanks, will have to talk to the YHGFL support as they supply Sophos tot his school.

    On a related matter, could this be part of my problem.

    From the release notes for EC v4.0 :-

    (DEF 36019) If Sophos Endpoint Security and Control is not installed on the server running the Enterprise Console management server, endpoint computers show “Unknown” as their up-to-date status. Sophos Endpoint Security and Control must always be installed (although it does not have to be running) on the server running the Enterprise Console

    management server. Otherwise, Enterprise Console will not be able to manage endpoint computers correctly.

    Am I reading this right, if I don't install but not necessarily execute Endpoint Security on my server then I should not expect EC to manage my endpoints correctly.

    Has anyone not installed Endpoint Security and Control or used another package to protect their server? To be honest I have installed ESET on the server to protect the mail system and server files rather than SOPHOS. Will this be having a major affect?

    As the amount of mail comming in is very small I might risk removing the ESET software and seeing if it makes any difference and then as a second test installing the Endpoint Software on the server.

    Any thought?

    Thank-you in advance for your help and time.

    Regards

    Gary

    :5822
Reply
  • Thanks, will have to talk to the YHGFL support as they supply Sophos tot his school.

    On a related matter, could this be part of my problem.

    From the release notes for EC v4.0 :-

    (DEF 36019) If Sophos Endpoint Security and Control is not installed on the server running the Enterprise Console management server, endpoint computers show “Unknown” as their up-to-date status. Sophos Endpoint Security and Control must always be installed (although it does not have to be running) on the server running the Enterprise Console

    management server. Otherwise, Enterprise Console will not be able to manage endpoint computers correctly.

    Am I reading this right, if I don't install but not necessarily execute Endpoint Security on my server then I should not expect EC to manage my endpoints correctly.

    Has anyone not installed Endpoint Security and Control or used another package to protect their server? To be honest I have installed ESET on the server to protect the mail system and server files rather than SOPHOS. Will this be having a major affect?

    As the amount of mail comming in is very small I might risk removing the ESET software and seeing if it makes any difference and then as a second test installing the Endpoint Software on the server.

    Any thought?

    Thank-you in advance for your help and time.

    Regards

    Gary

    :5822
Children
No Data