Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

Upgrade considerations for OfficeScan (OSCE) servers and clients/agents

    • Updated:
    • 24 Oct 2016
    • Product/Version:
    • OfficeScan 10.6
    • OfficeScan 11.0
    • OfficeScan XG.All
    • Platform:
    • Windows 2003 Enterprise
    • Windows 2003 Enterprise 64-bit
    • Windows 2003 Standard
    • Windows 2003 Standard 64-bit
    • Windows 2008 Enterprise
    • Windows 2008 Server Core
    • Windows 2008 Standard
    • Windows 7 32-bit
    • Windows 7 64-bit
    • Windows Vista 32-bit
    • Windows Vista 64-bit
    • Windows XP Home
    • Windows XP Professional
    • Windows XP Professional 64-bit
Summary

You have to consider the following when upgrading your OfficeScan (OSCE) server and clients:

  • IPv6 Support
  • Unsupported Operating Systems
  • OfficeScan Settings and Configurations
  • Scan Method Deployment During Upgrade
Details
Public

The IPv6 requirements for the OfficeScan server and client upgrades are as follows:

For OfficeScan 10.6

  • The OfficeScan server to be upgraded must be installed on Windows Server 2008. OfficeScan servers on Windows Server 2003 cannot be upgraded because Windows Server 2003 only supports IPv6 addressing partially.
  • The OfficeScan server to be upgraded must be version 10.x or 8.0 SP1.
  • The server must already be using an IIS web server. Apache web server does not support IPv6 addressing.
  • Assign an IPv6 address to the server. In addition, the server must be identified by its host name, preferably its Fully Qualified Domain Name (FQDN). If the server is identified by its IPv6 address, all clients currently managed by the server will lose connection with the server. If the server is identified by its IPv4 address, it will not be able to deploy the client to pure IPv6 computers.
  • Verify that the host machine’s IPv6 or IPv4 address can be retrieved using, for example, the “ping” or “nslookup” command.

For OfficeScan 11.0

  • The OfficeScan server to be upgraded must be installed on Windows Server 2008 or 2012. OfficeScan servers on Windows Server 2003 cannot be upgraded because Windows Server 2003 only supports IPv6 addressing partially.
  • The OfficeScan server to be upgraded must be version 10.x.
  • The server must already be using an IIS web server. Apache web server does not support IPv6 addressing.
  • Assign an IPv6 address to the server. In addition, the server must be identified by its host name, preferably its fully qualified domain name (FQDN). If the server is identified by its IPv6 address, all agents currently managed by the server lose connection with the server. If the server is identified by its IPv4 address, it cannot deploy the agent to pure IPv6 endpoints.
  • Verify that the host machine’s IPv6 or IPv4 address can be retrieved using, for example, the ping or nslookup command.

For OfficeScan XG

The IPv6 requirements for the OfficeScan server fresh installation are as follows:

  • The server must use an IIS web server.
  • If the server will manage IPv4 and IPv6 agents, it must have both IPv4 and IPv6 addresses and must be identified by its host name. If a server is identified by its IPv4 address, IPv6 agents cannot connect to the server. The same issue occurs if pure IPv4 agents connect to a server identified by its IPv6 address.
  • If the server will manage only IPv6 agents, the minimum requirement is an IPv6 address. The server can be identified by its host name or IPv6 address. When the server is identified by its host name, it is preferable to use its Fully Qualified Domain Name (FQDN). This is because in a pure IPv6 environment, a WINS server cannot translate a host name to its corresponding IPv6 address.
     
    The FQDN can only be specified when performing a local installation of the server. It is not supported on remote installations.
  • Verify that the host machine's IPv6 or IPv4 address can be retrieved using, for example, the "ping" or "nslookup" command.
  • If you are installing the OfficeScan server to a pure IPv6 endpoint, set up a dual-stack proxy server that can convert between IPv4 and IPv6 addresses (such as DeleGate). Position the proxy server between the OfficeScan server and the Internet to allow the server to successfully connect to Trend Micro hosted services, such as the ActiveUpdate server, the Online Registration website, and Smart Protection Network.

OfficeScan no longer supports Windows 95, 98, Me, NT, 2000, or the Itanium architecture platform.

For OfficeScan 10.6

If you plan to upgrade to this version from OfficeScan 10.x/8.0 SP1 and you have OfficeScan 10.x/8.0 SP1 clients that run these operating systems:

  • Do not upgrade all OfficeScan 10.x/8.0 SP1 servers to this OfficeScan version.
  • Designate at least an OfficeScan 10.x or OfficeScan 8.0 SP1 server (parent server) to manage clients running unsupported operating systems.
  • Before upgrading the other servers:
    • Open the web console and click Networked Computers > Client Management on the main menu.
    • On the client tree, select the clients that you want to move and then click Manage Client Tree > Move Client.
    • Specify the parent server’s computer name/IP address and server listening port under Move selected client(s) to another OfficeScan Server.
    • Click Move.

For OfficeScan 11.0

If you plan to upgrade to this version from OfficeScan 10.x and you have OfficeScan 10.x clients/agents that run these operating systems:

  • Do not upgrade all OfficeScan 10.x servers to this OfficeScan version.
  • Designate at least one OfficeScan 10.x server (parent server) to manage agents running unsupported operating systems.
  • Before upgrading the other servers:
    1. Log on to the web console and click Networked Computers > Client Management on the main menu.
    2. On the agent tree, select the agents that you want to move and then click Manage Client Tree > Move Client.
    3. Specify the parent server’s endpoint name/IP address and server listening port under Move selected client(s) to another OfficeScan Server.
    4. Click Move.

If you have upgraded the OfficeScan server but did not move unsupported clients, use a tool called Client Mover for Legacy Platforms to move the clients to a parent server that can manage them.

For OfficeScan XG

If you plan to upgrade to this version and you have OfficeScan agents that run these operating systems:

  • Do not upgrade all OfficeScan servers to this OfficeScan version.
  • Designate at least one OfficeScan server (parent server) to manage agents running unsupported operating systems.
  • Before upgrading the other servers:
    • For OfficeScan 10.x servers:
      • Log on to the web console and click Networked Computers > Client Management on the main menu.
      • On the client tree, select the clients that you want to move and then click Manage Client Tree > Move Client.
      • Specify the parent server's computer name/IP address and server listening port under Move selected client(s) to another OfficeScan Server.
      • Click Move.
    • For OfficeScan 11.x servers:
      • Log on to the web console and click Agents > Agent Management on the main menu.
      • On the agent tree, select the agents that you want to move and then click Manage Agent Tree > Move Agent.
      • Specify the parent server's computer name/IP address and server listening port under Move selected agent(s) to another OfficeScan Server.
      • Click Move.

Back up the OfficeScan database and important configuration files before upgrading the OfficeScan server. Back up the OfficeScan server database to a location outside the OfficeScan program directory.

To back up and restore the OfficeScan database and configuration files:

  1. Back up the database from the OfficeScan 10.x/8.0 SP1 (for OfficeScan 10.6) and OfficeScan 10.x (for OfficeScan 11.0/XG) web console by going to Administration > Database Backup.

    See the Administrator’s Guide or Server Help for these product versions for detailed instructions. For the XG supported upgrade path, please refer to the following article: Supported upgrade path to OfficeScan (OSCE) XG.

     
    Do not use any other type of backup tool or application.
  2. Stop the OfficeScan Master Service from the Microsoft Management Console.
  3. Manually back up the following files and folders found under <Server installation folder>\PCCSRV:

     
    Back up these files and folders to roll back OfficeScan only if you encounter upgrade issues.
    • ofcscan.ini: Contains global client settings
    • ous.ini: Contains the update source table for antivirus component deployment
    • Private folder: Contains firewall and update source settings
    • Web\tmOPP folder: Contains Outbreak Prevention settings
    • Pccnt\Common\OfcPfw*.dat: Contains firewall settings
    • Download\OfcPfw*.dat: Contains firewall deployment settings
    • Log folder: Contains system events and the connection verification logs
    • Virus folder: Contains quarantined files
    • HTTPDB folder: Contains the OfficeScan database
  4. Upgrade the OfficeScan server.
     
    If you encounter upgrade issues, copy the backup files from step 3 to the <Server installation folder>\PCCSRV folder on the target computer and restart the OfficeScan Master Service.

In this OfficeScan version, you can configure clients to use either Smart Scan or Conventional Scan.

If you upgrade OfficeScan from an earlier version, you can retain or customize the scan method for each domain depending on the upgrade method chosen. Consider the following:

Upgrading from OfficeScan 10.x:

  • If you plan to upgrade the OfficeScan 10.x server directly on the server computer, you do not need to make scan method changes from the web console because clients will retain their scan method settings after they upgrade.
  • If you plan to upgrade OfficeScan 10.x clients by moving them to an OfficeScan 10.6 server:

     
    If you plan to use automatic client grouping, enable it only after all clients have upgraded to ensure that all scan method settings are retained during client upgrade.
    • In the OfficeScan 10.6 server, choose manual client grouping. This client grouping method allows you to create new domains.
    • Duplicate the domain structure and scan method settings in the OfficeScan 10.x server into the OfficeScan 10.6 server. If the domain structure and scan method settings on the two servers are not identical, some clients that move to the OfficeScan 10.6 server may not apply their original scan method settings.

Upgrading from OfficeScan 8.0 Service Pack 1

  • If you plan to upgrade the OfficeScan 8.0 SP1 server directly on the server computer:

    All Clients Use Smart Scan:

    1. Prevent automatic updates and upgrade on clients.
    2. Upgrade the OfficeScan server.
    3. Change the root level scan method to smart scan.
    4. Upgrade clients.

    All Clients Use Conventional Scan:

    1. Upgrade the OfficeScan server.
    2. Upgrade clients

    Most Clients Use Smart Scan:

    Trend Micro recommends performing the following tasks:

    1. Prevent automatic updates and upgrade on clients.
    2. Upgrade the OfficeScan server.
    3. Change the root level scan method to smart scan.
    4. Upgrade clients (All clients will use smart scan).
    5. Change the scan method of clients that you want to use conventional scan.
  • If you plan to upgrade clients by moving them to an OfficeScan 10.6 server:

    All Clients Use Smart Scan:

    1. In the OfficeScan 8.0 SP1 server, move clients to the OfficeScan 10.6 server.

    All Clients Use Conventional Scan:

    1. In the OfficeScan 10.6 server, change the root level scan method to conventional scan.
    2. In the OfficeScan 8.0 SP1 server, move clients to the OfficeScan 10.6 server.

    Most Clients Use Smart Scan:

    1. In the OfficeScan 8.0 SP1 server:
      1. Identify which domains will apply smart scan and those that will apply conventional scan. For example, Domains A1, A2, and A3 will apply smart scan, and domains A4, A5, and A6 will apply conventional scan.
      2. Ensure that OfficeScan 8.0 SP1 clients that you want to use smart scan are grouped under Domain A1, A2, or A3.
      3. Ensure that OfficeScan 8.0 SP1 clients that you want to use conventional scan are grouped under Domain A4, A5, or A6.
    2. In the OfficeScan 10.6 server:
      1. Choose manual client grouping. This client grouping method allows you to create new domains.
      2. Create Domains A1, A2, A3, A4, A5, and A6. Use the exact domain names.
      3. Change the scan method of domains A4, A5, and A6 to conventional scan.
    3. In the OfficeScan 8.0 SP1 server:
      1. Move clients to the OfficeScan 10.6 server.

Upgrading to OfficeScan 11.0/XG

  • When planning to upgrade the OfficeScan 10.x server directly on the server computer, it is not necessary to make scan method changes from the web console because agents retain their scan method settings after they upgrade.
  • When planning to upgrade OfficeScan 10.x agents by moving them to the OfficeScan 11.0/XG server:
    • In the OfficeScan 11.0/XG server, choose manual agent grouping. This agent grouping method allows for the creation of new domains.

       
      When using automatic agent grouping, enable it only after all agents have upgraded to ensure that all scan method settings are retained during agent upgrade.
    • Duplicate the domain structure and scan method settings in the OfficeScan 10.x server into the OfficeScan 11.0/XG server. If the domain structure and scan method settings on the two servers are not identical, some agents that move to the OfficeScan 11.0/XG server may not apply their original scan method settings.

Refer to the following link for more installation and upgrade information: OfficeScan Online Help.

Premium
Internal
Rating:
Category:
Configure; Upgrade
Solution Id:
1095118
Feedback
Did this article help you?

Thank you for your feedback!

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support


To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.


Need More Help?

Create a technical support case if you need further support.