1. Introduction
Symantec Endpoint Protection Manager database contains all important data like policies, information on your clients, settings, logs, etc. One of the elements of successful preparation for Disaster Recovery procedure is back up of the database. This article explains how to backup the database, how to set automatic backup and how to change the place backups will go to. Note: if you use MS SQL database for your Symantec Endpoint Protection Manager, you will be able to apply this procedure but you can also take different backup strategies. Please refer to MS SQL documentation for details.
2. Configuration
2.1 SEPM installation folder
You can choose where you want to install your Symantec Endpoint Protection Manager during the first installation stage:
2.2 Setting the target path for backup files.
Backup files will be located in a folder \data\backup. Where exactly \data folder will be installed is set during the second stage of installation of Symantec Endpoint Protection Manager – when Management Server Configuration Wizard starts.
If you choose Simple installation the only choice possible will be the default location suggested by Wizard:
\Symantec Endpoint Protection Manager\data
where \Symantec Endpoint Protection Manager is your SEPM installation folder chose during the first stage of installation.
However, if you choose Advanced installation, after you choose the number of clients in your environment and wherever you choose to install the first or additional site or install another manager for an existing one – you will be presented with a screen where you will be asked for server name, port, web console port and server data folder.
2.2 Changing the target path for backup files.
You may want to change the location of the folder where database backups are put after having your SEPM installed. This might be due to the fact that you want to keep an extensive number of database backups and you need to put them on a larger drive while you do not want to have to copy them manually there. You can change this location easily by launching Management Server Configuration Wizard from Start – All Programs – Symantec Endpoint Protection Manager. If you choose to reconfigure the existing server:
You will be presented with the same settings: server name, port, web console port and server data folder. From here you can change the location for data folder and it will be moved automatically.
Please note: it is not possible to move only \data\backup folder to another location. The whole folder \data must be moved with all its subfolders.
More information on this topic may be found in the technical article:
How to modify the Symantec Endpoint Protection Manager (SEPM) Database Backup and Restore Wizard backup location
http://www.symantec.com/docs/TECH103675
3. Backup
Manual backup can be performed at any moment by stopping Symantec Endpoint Protection Manager service:
and launching Backup and Restore from Start – All Programs – Symantec Endpoint Protection Manager. Please mind that backup may take some time so be patient – it depends on your database’s size and your computer’s speed.
Another way to start backup is to open the console, go to Admin panel and click on servers. Then choose your database and under tasks click on Back Up Site Now.
After the backup is finished, in the backup folder you will find .zip file containing the backup with date and time of backup in a file’s name.
Automatic backup is set through Symantec Endpoint Protection Manager console. Go to Admin panel and click on Servers. Select your database and under Tasks choose Edit Backup Settings. Set the schedule for backups and number of copies to keep (if this number is exceeded, the oldest copy is removed).
4. Restore
To restore the database from the backup you should first stop Symantec Endpoint Protection Manager service. Then go to Start – All Programs – Symantec Endpoint Protection Manager – Backup and Restore and choose Restore.
If in your \data\backup folder SEPM cannot find any backup file you will be presented with a prompt to browse to a .zip file containing backup:
Otherwise a drop-down menu with available backups with their dates will be shown.
The restoration can take same time. After it finishes you need to run Start – All Programs – Symantec Endpoint Protection Manager – Management Server Configuration Wizard to synchronize the console with the new database.