Info Security Memo
  • Blog
  • Sitemap
    • Categories
  • Contact
  • About
  • Resources
  • Tools
  • 51sec.org

Build Confidence

Focusing on Information Security 

Info Security Notes

Deploy Symantec Endpoint Encryption 11.2.1 and Configure SEE to Encrypt Client Machines

9/3/2019

0 Comments

 
Symantec Endpoint Encryption protects sensitive information and ensures regulatory compliance. It encrypts all files on the hard drive, sector-by-sector, for maximum security. It supports Windows, Mac, tablets, self-encrypting drives, and removable media (USB drives, external hard drives, and DVDs).

I had a chance to install it in my lab environment for a testing. This post is kind of recording all steps including all mistakes I had made, especially in the YouTube video.


1. Pre-Installation System Requirements:

1.1 OS Requirements

  • Microsoft Windows Server 2016 Datacenter, with updates
  • Microsoft Windows Server 2016 Standard, with updates
  • Microsoft Windows Server 2012 R2 Datacenter, with updates
  • Microsoft Windows Server 2012 R2 Standard, with updates
  • Microsoft Windows Server 2008 R2 Enterprise SP1 (Deprecated in SEE 11.2.1 MP1)
  • Microsoft Windows Server 2008 R2 Standard SP1 (Deprecated in SEE 11.2.1 MP1)

1.2 .NET Requirements
Operating system Required version of .NET Framework
Microsoft Windows Server 2008 R2 4.5.2 (Deprecated in SEE 11.2.1 MP1)
Microsoft Windows Server 2012 R2 4.5.2
Microsoft Windows Server 2016
4.6.2 (For Symantec Endpoint Encryption 11.1.3 and later)
1.3 DB Requirements

SQL Server Version On the Symantec Endpoint
Encryption Management
Server
SQL Server 2016 Enterprise (64-bit) Yes
SQL Server 2016 Standard (64-bit) Yes
SQL Server 2014 Enterprise (64-bit) Yes
SQL Server 2014 Standard (64-bit) Yes
SQL Server 2014 Express with Advanced Services (64-bit) (deprecated in SEE 11.2.1 MP1) Yes
SQL Server 2012 Enterprise, SP1 (64-bit) (deprecated in SEE 11.2.1 MP1) Yes
SQL Server 2012 Standard, SP1 (64-bit) (deprecated in SEE 11.2.1 MP1) Yes
SQL Server 2012 Express with Advanced Services, SP1 (64-bit) (deprecated in SEE 11.2.1 MP1) Yes


1.4 Add prerequisites to the server 
including Internet Information Services (IIS), the .NET framework, and other tools.See article HOWTO101921 for enabling the prerequisite server roles and features.


1.5 Download SEE Installation Software

2. Installing Symantec Endpoint Encryption Server
Double-click the file "SEE Server Suite x64.msi" to run it.

You can find the  Symantec Endpoint Encryption Installation Guide at https://support.symantec.com/en_US/article.DOC9134.html. Download 11.2.1 installation guide file - symcEE_11.2.1_InstallGuide_en.pdf.

Follow the guide, you should be able to get installation done if all prerequisites meet. My video at the end of this post will give you an idea how this installation looks like.

3. Configuring the Symantec Endpoint Encryption Management Server
After you run the Symantec Endpoint Encryption Management Server wizard, the configuration
wizard automatically launches. You use the wizard to set up your directory service synchronization and to configure the Web service. You can also manually start the wizard by running the configuration manager program on the Symantec Endpoint Encryption Management Server. You must complete the wizard before you can synchronize your directory services and create your client installation packages.



4. Using the Symantec Endpoint Encryption Manager to Generate Windows Clients








5. Deploying Clients

Double click new generated SEE client software , either "SEE Client.exe" or "SEE Client_x64.exe", to start installation. You will need admin privilege account to install this client.

After complete installation, based on your package settings, you might see following screen after you rebooted your machine.



Once you successfully SSO logged in client machine, you can check SEE Management Agent software to see check in status.


6. Create SEE Policy at SEE Native Policy Manager




7. Create Groups at SEE Users and Computers - > SEE Managed Computers
You can create your own group based on your policy.



8. Assign SEE policy created at step 6 to the Group created at step 7

Symantec Encryption Endpoint 11.2.1 Installation Guide can be downloaded from  symcEE_11.2.1_InstallGuide_en.pdf (1.3 MB)

Symantec Encryption Endpoint 11.2.1 Policy Administrator Guide can be downloaded from symcEE_11.2.1_PolicyAdmin_en.pdf (2.7 MB)


Troubleshooting:

Issue 1 - Save failed for web server configuration due to invalid data

The web site actually creates during the initial Management Server installation.  If you are at the section where the yellow/white boxes are asking for configuration data, the site should be saved already.  If it is not, uninstall, verify IIS components are all installed as required in HOWTO101921,  and try again.
If you are still in the installation piece of the Management Server, you most likely have missed part of the required IIS pieces.  Exit the installation and verify everything in HOWTO101921 is set up correctly.
The most common missed pieces are the "IIS 6 Management Compatibility (check all four entries)" and the "IIS Management Scripts and Tools".  Both IIS 6 and 7 components are required.


YouTube - Deploy SEE Video:







References:
  • System Requirements for Symantec Endpoint Encryption Management Server 11.2.x
  • How to: Install Symantec Endpoint Encryption 11
  • Symantec Endpoint Encryption Policy Administrator Guide
  • Symantec Encryption Endpoint 11.2.1 Installation Guide 














0 Comments



Leave a Reply.

    Categories

    All
    Architecture
    Blog
    Checkpoint
    Cisco
    Cloud
    CyberArk
    F5
    Fortigate
    Guardium
    Juniper
    Linux
    Network
    Others
    Palo Alto
    Qualys
    Raspberry Pi
    Security
    SIEM
    Software
    Vmware
    VPN
    Wireless

    Archives

    March 2024
    February 2024
    January 2024
    December 2023
    November 2023
    October 2023
    September 2023
    August 2023
    July 2023
    June 2023
    May 2023
    April 2023
    March 2023
    February 2023
    January 2023
    December 2022
    November 2022
    October 2022
    September 2022
    August 2022
    July 2022
    June 2022
    May 2022
    April 2022
    March 2022
    February 2022
    January 2022
    December 2021
    November 2021
    October 2021
    September 2021
    August 2021
    July 2021
    June 2021
    May 2021
    April 2021
    March 2021
    February 2021
    January 2021
    December 2020
    November 2020
    October 2020
    September 2020
    August 2020
    July 2020
    October 2019
    September 2019
    June 2019
    July 2018
    May 2018
    December 2017
    August 2017
    April 2017
    March 2017
    January 2017
    December 2016
    November 2016
    October 2016
    September 2016
    August 2016
    July 2016
    June 2016
    May 2016
    April 2016
    March 2016
    February 2016
    January 2016
    December 2015
    November 2015
    October 2015
    September 2015
    August 2015
    July 2015
    June 2015
    May 2015
    April 2015
    March 2015

    Print Page:

    RSS Feed

    Email Subscribe
Powered by Create your own unique website with customizable templates.
  • Blog
  • Sitemap
    • Categories
  • Contact
  • About
  • Resources
  • Tools
  • 51sec.org