Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

Files to back up before upgrading, migrating, or uninstalling the OfficeScan server

    • Updated:
    • 17 Oct 2016
    • Product/Version:
    • OfficeScan 10.6
    • OfficeScan 11.0
    • OfficeScan XG.All
    • Platform:
    • N/A N/A
    • Windows 10
    • Windows 10 32-bit
    • Windows 10 64-bit
    • Windows 2003 32-Bit
    • Windows 2003 64-Bit
    • Windows 2003 Datacenter 64-bit
    • Windows 2003 Enterprise
    • Windows 2003 Enterprise 64-bit
    • Windows 2003 Enterprise Server
    • Windows 2003 Server R2
    • Windows 2003 Standard
    • Windows 2003 Standard 64-bit
    • Windows 2003 Standard Server Edition
    • Windows 2008 32-Bit
    • Windows 2008 64-Bit
    • Windows 2008 Datacenter
    • Windows 2008 Datacenter 64-bit
    • Windows 2008 Enterprise
    • Windows 2008 Enterprise 64-bit
    • Windows 2008 Enterprise Server
    • Windows 2008 Server Core
    • Windows 2008 Server R2 Enterprise
    • Windows 2008 Standard
    • Windows 2008 Standard 64-bit
    • Windows 2008 Standard Server Edition
    • Windows 2008 Web Server Edition
    • Windows 2008 Web Server Edition 64-bit
    • Windows 2012
    • Windows 2012 Datacenter R2
    • Windows 2012 Enterprise
    • Windows 2012 Enterprise R2
    • Windows 2012 Server Essential R2
    • Windows 2012 Server Essentials
    • Windows 2012 Standard
    • Windows 2012 Standard R2
    • Windows 2012 Web Server Edition
    • Windows 2016
    • Windows 7 32-Bit
    • Windows 7 64-Bit
    • Windows 8 32-Bit
    • Windows 8 64-Bit
    • Windows 8.1 32-Bit
    • Windows 8.1 64-Bit
    • Windows Vista 32-bit
    • Windows Vista 64-bit
    • Windows XP Home
    • Windows XP Professional
    • Windows XP Professional 64-bit
Summary

This article provides important steps in OfficeScan Server Disaster Recovery. These steps are essential when upgrading, uninstalling, or reinstalling the OfficeScan server using the same host name, FQDN, and IP address of the old or corrupted server.

This article is also useful when performing a server or domain migration especially when there is a need to retain the current OfficeScan settings and configuration files.

 
Follow the article Importing configurations using the OfficeScan server migration tool if you are migrating or upgrading to a new OfficeScan server.
Details
Public

OfficeScan server backup procedure:

  1. Create a backup of the OfficeScan server database to a location other than the OfficeScan program directory. The OfficeScan server can be set to automatically back up client/agent database information.

    This is configurable via the web-based management console under Administration > Database Backup section.  This process copies all database files under ..\TrendMicro\OfficeScan\PCCSRV\HTTPDB to either a local or remote location.

    It is recommended to do a daily backup especially during client/agent deployment.  The schedule can be changed to weekly after the deployment is complete.

    It is also recommended to configure the backup to start at 2:00 AM when client/agent interaction is minimal and the process does not coincide with other OfficeScan scheduled tasks.

     
    Do not use any other type of back up tool or application. Using third party application to back up the database may cause system instability or database corruption.
  2. Stop the OfficeScan Master Service.
  3. Manually back up the OfficeScan Server and Firewall configuration files:
    • ..\PCCSRV\Ofcscan.ini – Server configuration information
    • ..\PCCSRV\ Private\Ofcserver.ini – Server and Update Source configuration
    • ..\PCCSRV\ Ous.ini – client/agent update source configuration
    • ..\PCCSRV\ Private\PFW folder – Firewall profiles / policies
    • ..\PCCSRV\ Private\SortingRuleStore\ SortingRule.xml
    • ..\PCCSRV\ Private\AuthorStore folder – RBA User Profile
    • ..\PCCSRV\ Private\vdi.ini – vdi settings
  4. Start the OfficeScan Master Service.
  5. Perform the uninstallation/upgrade or migration.
    For details, see Uninstalling the OfficeScan server or Installing or Upgrading the OfficeScan Server in the Installation Guide.

Restoring the OfficeScan Server

In the event of server corruption, the OfficeScan server can be restored using the following steps:

 
You can only restore the OfficeScan server by using the same host name, FQDN, IP address, and installation path of the old or corrupted server.
  1. Rebuild the server using the same host name, FQDN, and IP address.
  2. Install OfficeScan 10.6 Server with the same Service Pack and Patch level as the original server.
    You can verify this information by checking the version details of the Ofcservice.exe from the old server.
  3. Stop the OfficeScan Master Service and WWW Publishing Service.
  4. Restore the backup database files under ..\Trend Micro\OfficeScan\PCCSRV\HTTPDB directory.
  5. Restore the OfficeScan server and Firewall policy configurations:
    • ..\PCCSRV\Ofcscan.ini
    • ..\PCCSRV\ Private\Ofcserver.ini
    • ..\PCCSRV\ Ous.ini
    • ..\PCCSRV\ Private\PFW folder
    • ..\PCCSRV\ Private\SortingRuleStore\SortingRule.xml
    • ..\PCCSRV\ Private\AuthorStore folder
    • ..\PCCSRV\ Private\vdi.ini
  6. From the command prompt, go to ..\Trend Micro\ OfficeScan folder and run the command "svrsvcsetup.exe –setprivilege".
  7. Start the OfficeScan Master Service and WWW Publishing Service.
  8. Although registered in the OfficeScan console, client may initially appear as Offline. To re-establish connection, perform a Manual Verification using the OfficeScan management console.

OfficeScan server backup procedure:

  1. Create a backup of the OfficeScan server database to a location other than the OfficeScan program directory. The OfficeScan server can be set to automatically back up agent database information.

    You can configure this via the web-based management console under Administration > Database Backup section. This process copies all database files under ..\TrendMicro\OfficeScan\PCCSRV\HTTPDB to either a local or remote location.

    It is recommended to do a daily backup especially during agent deployment. The schedule can be changed to weekly after the deployment is complete.

    It is also recommended to configure the backup to start at 2:00 AM when agent interaction is minimal and the process does not coincide with other OfficeScan scheduled tasks.

     
    Do not use any other type of back up tool or application. Using third party application to back up the database may cause system instability or database corruption.
  2. Stop the OfficeScan Master Service.
  3. Manually create a backup of the following files and folders found in the {Server Installation Folder}\PCCSRV directory:
    • ofcscan.ini - Contains global agent settings.
    • ous.ini - Contains the update source table for antivirus component deployment.
    • Private folder - Contains firewall and update source settings.
    • Web\tmOPP folder - Contains Outbreak Prevention settings.
    • Pccnt\Common\OfcPfw.dat - Contains firewall settings.
    • Download\OfcPfw.dat - Contains firewall deployment settings.
    • Log folder - Contains system events and the connection verification logs.
    • Virus folder - Contains quarantined files.
    • HTTPDB folder - Contains the OfficeScan database.
  4. Make a backup copy of the certificate for the secure server initiated communications using the Authentication Certificate Manager tool.
     
    This tool is in OfficeScan XG. Users need an administrator privileges to run this tool. It can only manage the certificates located locally on the machine.
  5. On the old OfficeScan server, open a command prompt and change the directory to the OfficeScan directory \PCCSRV\Admin\Utility\CertificateManager.
  6. Back up the existing certificate using the following command. The backup will be placed in the C:\test folder and the file will be in ZIP format.

    CertificateManager.exe –b strongpassword C:\Test\Trendmicro.zip

Upgrading to OfficeScan XG:

When upgrading to OfficeScan XG, it will check and assess your existing OfficeScan server. It will ask you to perform a backup of the existing OfficeScan server. Make sure to that the installer backs up your existing server.

After the backup process is complete, you may opt to transfer the backup to a different drive or computer in case the server is corrupted. Afterwards, proceed with the upgrade.

Restoring the OfficeScan server

In the event of server corruption, you can restore the OfficeScan server by following the procedure below:

 
You can only restore the OfficeScan server by using the same host name, FQDN, IP address, and installation path of the old or corrupted server.
  1. Rebuild the server using the same host name, FQDN, and IP address.
  2. Install OfficeScan.
  3. Restore the certificates by doing one of the following options:
    • During the reinstallation of the OfficeScan server and you reach the Authentication page, make sure to use the same certificate that you have used during the initial installation. This would ensure that the agent and server communication would be restored. By default, it would keep the key under …\Trend Micro\OfficeScan\AuthCertBackup. Otherwise, browse for the exact location of the file. Enter the password as well.

      Server Authentication Certificate

    • On the new server, open a command line and run the command “CertificateManager.exe –r strongpassword C:\test\Trendmicro.zip” to restore all the certificates to the new server.
  4. After completing the installation, use the same database to restore your settings and data.
    If you have a backup of your OfficeScan database, refer to the options below to restore it:

    Option 1: OfficeScan CodeBase Database

    1. Stop the OfficeScan Master Service via Windows Services.
    2. Back up and delete the contents of the existing database located at the ..\Trend Micro\OfficeScan\PCCSRV\HTTPDB directory.
    3. Copy the previous database from a backup copy and paste the contents inside the ..\Trend Micro\OfficeScan\PCCSRV\HTTPDB directory.
    4. Start the OfficeScan Master Service.
    5. Login to the OfficeScan web console.

    Option 2: OfficeScan SQL Database

     
    This option is only applicable if you migrated your OfficeScan XG Database to SQL.
    1. Go to the ..\Trend Micro\OfficeScan\PCCSRV\Admin\Utility\SQL directory.
    2. Run the SQLTxfr.exe tool as administrator.
    3. On the tool, select the Switch to an existing OfficeScan SQL Database option.
    4. Enter the correct information on the tool.

      SQL server migration tool

    5. Wait for the process to complete, and then login to the OfficeScan web console.
  5. Stop OfficeScan Master Service, then manually replace the following files with the ones we copied in step 3 under the OfficeScan server backup procedure above.

    • ofcscan.ini - contains global agent settings
    • ous.ini - contains the update source table for antivirus component deployment
    • Private folder - contains firewall and update source settings
    • Web\tmOPP folder - contains Outbreak Prevention settings
    • Pccnt\Common\OfcPfw.dat - contains firewall settings
    • Download\OfcPfw.dat - contains firewall deployment settings
    • Log folder - contains system events and the connection verification logs
    • Virus folder - contains quarantined files
  6. Start OfficeScan Master Service. Open the console and make sure it's working fine and that the settings are indeed correct.
Premium
Internal
Rating:
Category:
Upgrade; Uninstall; Migrate
Solution Id:
1039284
Feedback
Did this article help you?

Thank you for your feedback!

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support


To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.


Need More Help?

Create a technical support case if you need further support.