This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Promote Remote SEC to Primary SEC

Hello,

 

We are planning a migration from Windows 2008r2 to Windows 2016. We would like to run the two systems in parallel with the Windows 2016 host acting as a remote SEC. When ready, we'd like to decomm the 2008r2 server and promote the 2016 SEC as the primary manager. 

 

  • Does Sophos support "promoting" a remote SEC to primary? 


This thread was automatically locked due to age.
Parents
  • Hello Ntrepid Corporation,

    MEric and Jasmin have already suggested what to do.
    For clarification: It is a Remote Console (that can also be installed on a workstation), not a remote SEC. You can't promote a remote console to a SEC (I prefer the term Management Server) even though you use the SEC installer to install the console. The installer has three major components - Console, Database, Management Server. The latter consists of the management proper and the Update Manager (SUM). The server and its endpoints communicate using the Remote Management System (RMS). While on endpoints RMS is like all other Endpoint components maintained by AutoUpdate, on the server it is maintained by SUM. Thus you can't promote an already protected (i.e. where Endpoint is installed, whether also the Console or not) machine by just running the SEC installer.

    One important decision is whether you want to transfer your configuration (group structure, policies) and historical data - this would forbid the "slow migration" of endpoints. 

    Christian

Reply
  • Hello Ntrepid Corporation,

    MEric and Jasmin have already suggested what to do.
    For clarification: It is a Remote Console (that can also be installed on a workstation), not a remote SEC. You can't promote a remote console to a SEC (I prefer the term Management Server) even though you use the SEC installer to install the console. The installer has three major components - Console, Database, Management Server. The latter consists of the management proper and the Update Manager (SUM). The server and its endpoints communicate using the Remote Management System (RMS). While on endpoints RMS is like all other Endpoint components maintained by AutoUpdate, on the server it is maintained by SUM. Thus you can't promote an already protected (i.e. where Endpoint is installed, whether also the Console or not) machine by just running the SEC installer.

    One important decision is whether you want to transfer your configuration (group structure, policies) and historical data - this would forbid the "slow migration" of endpoints. 

    Christian

Children
No Data