Upgrading Endpoint Security Clients

This section includes procedure for upgrading endpoint clients:

You can upgrade to E80.x clients from earlier versions of E80.x clients with these requirements:

• You must upgrade both the Initial Client and the Software Blade Package at the same time. You cannot upgrade the Initial Client by itself.
• During the upgrade you cannot remove the Full Disk Encryption Software Blade.
• You can change all other Software Blades and all Software Blade configuration settings.

Client upgrade workflow:

1. Make sure that the clients are connected to an Endpoint Security Management Server of the higher version.
2. Get a complete package with Initial Client and the Software Blade Package. Get this from the Deployment tab in one of these ways:
   • Download a package from the Packages for Export window.
   • In the Deployment Rules window, right-click in a rule and select Download Package. This includes the Initial Client and Software Blade Package.
3. Deploy the package.

Upgrading with Deployment Rules

The Client Settings Policy controls if users can postpone an upgrade installation or if the upgrade is installed on clients immediately. You can configure the settings in the Client Settings Policy. Edit the Default installation and upgrade settings.

To upgrade clients with Deployment Assignments:

1. In the Deployment tab, select a rule and change its Endpoint Client Version in the Client Version column.

   All computers are assigned to that Policy rule will be upgraded.

2. Optional: Change who the rule applies to in the Applies To column.
3. Select File > Save or click the Save icon.
4. Select File > Install Policies or click the Install Policies icon.
5. The Endpoint Agent on each assigned client downloads the new package. The client installation starts based on the settings in the Client Settings policy rule. You can configure:
   • If the Client Settings policy forces installation and automatically restarts without user notification.
   • If the Endpoint Agent sends a message to the user that an installation is ready and gives the user a chance to postpone the installation or save work and install immediately.
6. The Endpoint Agent installs the new client.

   If the user does not click Install now, installation starts automatically after a timeout.

7. After installation, the Endpoint Agent reboots the computer.

Upgrading with an Exported Package

Upgrade a client to a new package that includes the same Software Blades as it has now. Add and remove Software Blades after the upgraded package is installed.

To upgrade clients with an exported package:

1. In the Deployment tab, go to Packages for Export.
2. select a package and click Upgrade Profile.

   A message opens that shows if an update is available.

3. Click Yes to confirm that you want to upgrade the profile.
4. In the Export Package window:
   1. Select the platform versions (32/64 bit) to export for laptops and desktops.
   2. Enter or browse to a destination folder.
5. Click OK.

   The package EPS.msi and/or PreUpgrade.exe files are downloaded to the specified path. A different folder is automatically created for each option selected in step 3a.

6. Send the EPS.msi and PreUpgrade.exe files to endpoint users. Endpoint users manually install the packages. They must use Administrator privileges.

   You can also use third party deployment software, a shared network path, email, or some other method.

Gradual Upgrade

To upgrade more gradually, you can create a new deployment profile and distribute it only to specified computers.

Note - For an exported package, save the new package in a different location than the previous package.

When you are prepared to upgrade all clients, upgrade all deployment profiles.