Files to back up before upgrading, migrating, or uninstalling the OfficeScan server

OfficeScan server backup procedure:

1. Create a backup of the OfficeScan server database to a location other than the OfficeScan program directory. The OfficeScan server can be set to automatically back up client/agent database information.
   
   This is configurable via the web-based management console under Administration > Database Backup section.  This process copies all database files under ..\TrendMicro\OfficeScan\PCCSRV\HTTPDB to either a local or remote location.
   
   It is recommended to do a daily backup especially during client/agent deployment.  The schedule can be changed to weekly after the deployment is complete.
   
   It is also recommended to configure the backup to start at 2:00 AM when client/agent interaction is minimal and the process does not coincide with other OfficeScan scheduled tasks.

    

   Do not use any other type of back up tool or application. Using third party application to back up the database may cause system instability or database corruption.
2. Stop the OfficeScan Master Service.
3. Manually back up the OfficeScan Server and Firewall configuration files:
   • ..\PCCSRV\Ofcscan.ini – Server configuration information
   • ..\PCCSRV\ Private\Ofcserver.ini – Server and Update Source configuration
   • ..\PCCSRV\ Ous.ini – client/agent update source configuration
   • ..\PCCSRV\ Private\PFW folder – Firewall profiles / policies
   • ..\PCCSRV\ Private\SortingRuleStore\ SortingRule.xml
   • ..\PCCSRV\ Private\AuthorStore folder – RBA User Profile
   • ..\PCCSRV\ Private\vdi.ini – vdi settings
4. Start the OfficeScan Master Service.
5. Perform the uninstallation/upgrade or migration.
   For details, see Uninstalling the OfficeScan server or Installing or Upgrading the OfficeScan Server in the Installation Guide.

Restoring the OfficeScan Server

In the event of server corruption, the OfficeScan server can be restored using the following steps:

1. Rebuild the server using the same host name, FQDN, and IP address.
2. Install OfficeScan 10.6 Server with the same Service Pack and Patch level as the original server.
   You can verify this information by checking the version details of the Ofcservice.exe from the old server.
3. Stop the OfficeScan Master Service and WWW Publishing Service.
4. Restore the backup database files under ..\Trend Micro\OfficeScan\PCCSRV\HTTPDB directory.
5. Restore the OfficeScan server and Firewall policy configurations:
   • ..\PCCSRV\Ofcscan.ini
   • ..\PCCSRV\ Private\Ofcserver.ini
   • ..\PCCSRV\ Ous.ini
   • ..\PCCSRV\ Private\PFW folder
   • ..\PCCSRV\ Private\SortingRuleStore\SortingRule.xml
   • ..\PCCSRV\ Private\AuthorStore folder
   • ..\PCCSRV\ Private\vdi.ini
6. From the command prompt, go to ..\Trend Micro\ OfficeScan folder and run the command "svrsvcsetup.exe –setprivilege".
7. Start the OfficeScan Master Service and WWW Publishing Service.
8. Although registered in the OfficeScan console, client may initially appear as Offline. To re-establish connection, perform a Manual Verification using the OfficeScan management console.

OfficeScan server backup procedure:

1. Create a backup of the OfficeScan server database to a location other than the OfficeScan program directory. The OfficeScan server can be set to automatically back up agent database information.

   You can configure this via the web-based management console under Administration > Database Backup section. This process copies all database files under ..\TrendMicro\OfficeScan\PCCSRV\HTTPDB to either a local or remote location.

   It is recommended to do a daily backup especially during agent deployment. The schedule can be changed to weekly after the deployment is complete.

   It is also recommended to configure the backup to start at 2:00 AM when agent interaction is minimal and the process does not coincide with other OfficeScan scheduled tasks.

    

   Do not use any other type of back up tool or application. Using third party application to back up the database may cause system instability or database corruption.
2. Stop the OfficeScan Master Service.
3. Manually create a backup of the following files and folders found in the {Server Installation Folder}\PCCSRV directory:
   • ofcscan.ini - Contains global agent settings.
   • ous.ini - Contains the update source table for antivirus component deployment.
   • Private folder - Contains firewall and update source settings.
   • Web\tmOPP folder - Contains Outbreak Prevention settings.
   • Pccnt\Common\OfcPfw.dat - Contains firewall settings.
   • Download\OfcPfw.dat - Contains firewall deployment settings.
   • Log folder - Contains system events and the connection verification logs.
   • Virus folder - Contains quarantined files.
   • HTTPDB folder - Contains the OfficeScan database.
4. Make a backup copy of the certificate for the secure server initiated communications using the Authentication Certificate Manager tool.
   
    

   This tool is in OfficeScan XG. Users need an administrator privileges to run this tool. It can only manage the certificates located locally on the machine.
5. On the old OfficeScan server, open a command prompt and change the directory to the OfficeScan directory \PCCSRV\Admin\Utility\CertificateManager.
6. Back up the existing certificate using the following command. The backup will be placed in the C:\test folder and the file will be in ZIP format.

   CertificateManager.exe –b strongpassword C:\Test\Trendmicro.zip

• Start the OfficeScan Master Service.
• Perform the uninstallation.
  For details, see Uninstalling the OfficeScan server or Installing or Upgrading the OfficeScan Server in the Installation Guide.

Upgrading to OfficeScan XG:

When upgrading to OfficeScan XG, it will check and assess your existing OfficeScan server. It will ask you to perform a backup of the existing OfficeScan server. Make sure to that the installer backs up your existing server.

After the backup process is complete, you may opt to transfer the backup to a different drive or computer in case the server is corrupted. Afterwards, proceed with the upgrade.

Restoring the OfficeScan server

In the event of server corruption, you can restore the OfficeScan server by following the procedure below:

1. Rebuild the server using the same host name, FQDN, and IP address.
2. Install OfficeScan.
3. Restore the certificates by doing one of the following options:
   • During the reinstallation of the OfficeScan server and you reach the Authentication page, make sure to use the same certificate that you have used during the initial installation. This would ensure that the agent and server communication would be restored. By default, it would keep the key under …\Trend Micro\OfficeScan\AuthCertBackup. Otherwise, browse for the exact location of the file. Enter the password as well.

     

   • On the new server, open a command line and run the command “CertificateManager.exe –r strongpassword C:\test\Trendmicro.zip” to restore all the certificates to the new server.
4. After completing the installation, use the same database to restore your settings and data.
   If you have a backup of your OfficeScan database, refer to the options below to restore it:

   Option 1: OfficeScan CodeBase Database

   1. Stop the OfficeScan Master Service via Windows Services.
   2. Back up and delete the contents of the existing database located at the ..\Trend Micro\OfficeScan\PCCSRV\HTTPDB directory.
   3. Copy the previous database from a backup copy and paste the contents inside the ..\Trend Micro\OfficeScan\PCCSRV\HTTPDB directory.
   4. Start the OfficeScan Master Service.
   5. Login to the OfficeScan web console.

   Option 2: OfficeScan SQL Database

    

   This option is only applicable if you migrated your OfficeScan XG Database to SQL.
   1. Go to the ..\Trend Micro\OfficeScan\PCCSRV\Admin\Utility\SQL directory.
   2. Run the SQLTxfr.exe tool as administrator.
   3. On the tool, select the Switch to an existing OfficeScan SQL Database option.
   4. Enter the correct information on the tool.

      

   5. Wait for the process to complete, and then login to the OfficeScan web console.

5. Stop OfficeScan Master Service, then manually replace the following files with the ones we copied in step 3 under the OfficeScan server backup procedure above.

   • ofcscan.ini - contains global agent settings
   • ous.ini - contains the update source table for antivirus component deployment
   • Private folder - contains firewall and update source settings
   • Web\tmOPP folder - contains Outbreak Prevention settings
   • Pccnt\Common\OfcPfw.dat - contains firewall settings
   • Download\OfcPfw.dat - contains firewall deployment settings
   • Log folder - contains system events and the connection verification logs
   • Virus folder - contains quarantined files
6. Start OfficeScan Master Service. Open the console and make sure it's working fine and that the settings are indeed correct.