DLP migration 14.6 to 15.1

Purpose

The purpose of this document is to help other upgrade form DLP 14.6 to 15.1. The upgrade is straight forward however it isn’t very well documented in the upgrade guide and this leads to issues.

1. Extract the upgrade readiness tool into SymantecDLP\Protect\Migrator\URT
2. Open command prompt as administrator and navigate to SymantecDLP\Protect\Migrator\URT\scripts
3. Then type sqlplus /nolog
4. Run  @oracle_create_user.sql this is to create an upgrade user for the dlp upgrade  when prompted enter the following details

• Please enter the password for sys user – <Your DB sys user password>
• Please enter SID – Protect
• Please enter required username to be created – upgrade
• Please enter a password for the new username ******
  

        5. Once the user has been created log into (sqlplus /nolog) sys@protect as sysdba and enter password when prompted GRANT

• READ,WRITE ON directory DATA_PUMP_DIR TO upgrade;
• GRANT SELECT ON dba_registry_history TO upgrade;
• GRANT SELECT ON dba_temp_free_space TO upgrade; *****
  

       6. Now the database is prepared we can now run the Readiness tool. To do this navigate to the URT folder in cmd (Still running as                             administrator) and type java UpdateReadinessTool when prompted enter the details at each line

• --username protect
• --password your protect db password
• --readiness_username upgrade
• --readiness_password Prot123
• --sid Protect *****
  

        7. Once you see the tool has finished running message you should go and check the file output to check for errors. *****

        8. If everything looks fine then proceed to install DLP 15.1 first we need to install the ServerJRE

        9. Follow the onscreen instructions

       10. Once the serverjre has been installed we can then proceed to install the Enforce or single tier, depending on your environment. To                       do this double click the desired installer and follow the onscreen instructions. *****

       11. When you get to the service user prompt select new user, press next and then enter a password for the SymantecDLP user. *****

       12. Once these have been entered continue to click next

      13. Once the install has finished run CMD as administrator and navigate to the following location C:\Program Files\Symantec\DataLossPrevention\Enforce Server\15.1\Protect\Migrator This assumes you have installed in c:\program files

      14. From this location we now need to run the migration utility by entering the following command EnforceServerMigrationUtility.exe or if you are migrating a single tier you need to  run SingleTierServerMigrationUtility.exe from C:\Program Files\Symantec\Data Loss Prevention\Single Tier Server\15.1      \Protect\Migrator **If you are migrating a single tier you must copy the URT folder that you extracted in step one to the \single tier server\15.1\protect\migrator otherwise the migration will fail** *****

      15. Select 1 for the location, the migration will now continue to migrate your data from 14.6 to 15.1 ****

       16. Once the migration utility has been ran you will see a message saying “Finished executing all migration actions. Migration was successful” ********

       17. Once you see the message above check your services and check to see if Symantec DLP services are running  ******

       18. Once you have confirmed that the services are running try logging into your Enforce console. When you login you will be required to Enter some details and then hit the ‘I Accept’ button *****

       19. Once you have logged into your Enforce console go to System – Servers & Detectors – Overview, you should now see that your version has been updated ******

                    You should now have a successful DLP upgrade from 14.6 to 15.1.

                   If you run into any issues, then please feel free to contact me.

               Thanks for readiing