Symantec LiveUpdate Administrator. Getting Started Guide

Symantec LiveUpdate Administrator Getting Started Guide

Symantec LiveUpdate Administrator Getting Started Guide The software described in this book is furnished under a license agreement and may be used only in accordance with the terms of the agreement. Documentation version 2.1.2 Legal Notice Copyright 2008 Symantec Corporation. All rights reserved. Symantec, the Symantec Logo, LiveUpdate, Symantec LiveUpdate Administrator, and Symantec AntiVirus are trademarks or registered trademarks of Symantec Corporation or its affiliates in the U.S. and other countries. Other names may be trademarks of their respective owners. The product described in this document is distributed under licenses restricting its use, copying, distribution, and decompilation/reverse engineering. No part of this document may be reproduced in any form by any means without prior written authorization of Symantec Corporation and its licensors, if any. THE DOCUMENTATION IS PROVIDED "AS IS" AND ALL EXPRESS OR IMPLIED CONDITIONS, REPRESENTATIONS AND WARRANTIES, INCLUDING ANY IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE OR NON-INFRINGEMENT, ARE DISCLAIMED, EXCEPT TO THE EXTENT THAT SUCH DISCLAIMERS ARE HELD TO BE LEGALLY INVALID. SYMANTEC CORPORATION SHALL NOT BE LIABLE FOR INCIDENTAL OR CONSEQUENTIAL DAMAGES IN CONNECTION WITH THE FURNISHING, PERFORMANCE, OR USE OF THIS DOCUMENTATION. THE INFORMATION CONTAINED IN THIS DOCUMENTATION IS SUBJECT TO CHANGE WITHOUT NOTICE. The Licensed Software and Documentation are deemed to be commercial computer software as defined in FAR 12.212 and subject to restricted rights as defined in FAR Section 52.227-19 "Commercial Computer Software - Restricted Rights" and DFARS 227.7202, "Rights in Commercial Computer Software or Commercial Computer Software Documentation", as applicable, and any successor regulations. Any use, modification, reproduction release, performance, display or disclosure of the Licensed Software and Documentation by the U.S. Government shall be solely in accordance with the terms of this Agreement.

Symantec Corporation 20330 Stevens Creek Blvd. Cupertino, CA 95014 http://www.symantec.com

Technical Support Symantec Technical Support maintains support centers globally. Technical Support s primary role is to respond to specific queries about product features and functionality. The Technical Support group also creates content for our online Knowledge Base. The Technical Support group works collaboratively with the other functional areas within Symantec to answer your questions in a timely fashion. For example, the Technical Support group works with Product Engineering and Symantec Security Response to provide alerting services and virus definition updates. Symantec s maintenance offerings include the following: A range of support options that give you the flexibility to select the right amount of service for any size organization Telephone and Web-based support that provides rapid response and up-to-the-minute information Upgrade assurance that delivers automatic software upgrade protection Global support that is available 24 hours a day, 7 days a week Advanced features, including Account Management Services For information about Symantec s Maintenance Programs, you can visit our Web site at the following URL: www.symantec.com/techsupp/ Contacting Technical Support Customers with a current maintenance agreement may access Technical Support information at the following URL: www.symantec.com/techsupp/ Before contacting Technical Support, make sure you have satisfied the system requirements that are listed in your product documentation. Also, you should be at the computer on which the problem occurred, in case it is necessary to replicate the problem. When you contact Technical Support, please have the following information available: Product release level Hardware information Available memory, disk space, and NIC information Operating system

Version and patch level Network topology Router, gateway, and IP address information Problem description: Error messages and log files Troubleshooting that was performed before contacting Symantec Recent software configuration changes and network changes Licensing and registration Customer service If your Symantec product requires registration or a license key, access our technical support Web page at the following URL: www.symantec.com/techsupp/ Customer service information is available at the following URL: www.symantec.com/techsupp/ Customer Service is available to assist with the following types of issues: Questions regarding product licensing or serialization Product registration updates, such as address or name changes General product information (features, language availability, local dealers) Latest information about product updates and upgrades Information about upgrade assurance and maintenance contracts Information about the Symantec Buying Programs Advice about Symantec's technical support options Nontechnical presales questions Issues that are related to CD-ROMs or manuals

Maintenance agreement resources If you want to contact Symantec regarding an existing maintenance agreement, please contact the maintenance agreement administration team for your region as follows: Asia-Pacific and Japan Europe, Middle-East, and Africa North America and Latin America contractsadmin@symantec.com semea@symantec.com supportsolutions@symantec.com Additional enterprise services Symantec offers a comprehensive set of services that allow you to maximize your investment in Symantec products and to develop your knowledge, expertise, and global insight, which enable you to manage your business risks proactively. Enterprise services that are available include the following: Symantec Early Warning Solutions These solutions provide early warning of cyber attacks, comprehensive threat analysis, and countermeasures to prevent attacks before they occur. Managed Security Services Consulting Services Educational Services These services remove the burden of managing and monitoring security devices and events, ensuring rapid response to real threats. Symantec Consulting Services provide on-site technical expertise from Symantec and its trusted partners. Symantec Consulting Services offer a variety of prepackaged and customizable options that include assessment, design, implementation, monitoring, and management capabilities. Each is focused on establishing and maintaining the integrity and availability of your IT resources. Educational Services provide a full array of technical training, security education, security certification, and awareness communication programs. To access more information about Enterprise services, please visit our Web site at the following URL: www.symantec.com Select your country or language from the site index.

Getting started This document includes the following topics: About the Symantec LiveUpdate Administrator What's new in the Symantec LiveUpdate Administrator How to get started Before you install System requirements for the Symantec LiveUpdate Administrator Installing the Symantec LiveUpdate Administrator Post-installation tasks Uninstalling the Symantec LiveUpdate Administrator About the Symantec LiveUpdate Administrator The Symantec LiveUpdate Administrator is an enterprise Web application that allows you to manage Symantec updates on multiple internal Central LiveUpdate servers, called Distribution Centers. Using the Symantec LiveUpdate Administrator, you download updates to the Manage Updates folder, and then publish the updates to production distribution servers for LiveUpdate clients to download, or to testing distribution centers, so that the updates can be tested before they are published to production. You can download and publish updates on schedule, allowing you to create a low maintenance, reliable system that can be set up once, and then run automatically. Updates can also be manually downloaded and published as needed. Figure 1-1 illustrates a typical LiveUpdate Administrator environment.

8 Getting started What's new in the Symantec LiveUpdate Administrator Figure 1-1 Symantec LiveUpdate Administrator environment Symantec Source Server Symantec LiveUpdate Administrator Production Distribution Center Locations Testing Distribution Center Locations 1 2 3 1 2 3 LiveUpdate Clients Symantec updates are downloaded from an external Symantec site to an internal Symantec LiveUpdate Administrator server. From there, the updates can either be sent immediately to a production distribution center to be downloaded by LiveUpdate clients, or sent to a testing center, so that the updates can be tested. Once the updates have passed your testing requirements, they are sent to the production center, on a schedule you determine. What's new in the Symantec LiveUpdate Administrator The Symantec LiveUpdate Administrator includes the following new features and enhancements: Publishing of specific content to internal distribution centers Testing and Production distribution centers. Testing servers allow for testing of updates prior to distribution to production servers. Ability to filter content on a per product basis.

Getting started How to get started 9 Symantec update downloading Automatic or manual download of content from source servers. (Source servers are typically Symantec servers that host downloadable content.) Source server failover support when primary servers cannot be accessed. Manage updates Ability to approve content for publishing. Ability to view all available content. Ability to roll back faulty updates from distribution centers. Updates can be locked in Distribution Centers so that they cannot be overwritten with newer updates. Monitoring Completed and active scheduled events. Manual download and distribution events. User management Administrator accounts for full application access. Administrators can add, edit, delete users, and force users to log off. Limited User can perform manual download and publishing, and verify results of publish in Manage Updates. How to get started Before you install This getting started guide describes the easiest and quickest way to install the Symantec LiveUpdate Administrator and provides the information you need to run the product. To use this guide to get started, do the following tasks: Read about the Symantec LiveUpdate Administrator components. Review the system requirements. Review preinstallation information and perform any required tasks. Install the product. After completing the installation, review the post-installation tasks. Before you install the Symantec LiveUpdate Administrator, you should become familiar with where the setup program installs the software. Make sure that your

10 Getting started System requirements for the Symantec LiveUpdate Administrator LiveUpdate clients are updated to the correct version for full compatibility, and that your environment meets the system requirements. The default location for installation is C:\Program Files\Symantec\LiveUpdate Administrator. Table 1-1 lists the installed components for the Symantec LiveUpdate Administrator. Table 1-1 Symantec LiveUpdate components Component name PostgreSQL DBMS Database Tomcat servlet engine LiveUpdate Administrator Install location <install path>\pgsql <install path>\pgsql\data <install path>\tomcat <install path>\tomcat\webapps\lua Web application Manage Updates folder <App_data_path>\All Users\Symantec\LiveUpdate Administrator\Downloads For example, C:\Documents and Settings\All Users\Symantec\LiveUpdate Administrator\Downloads System requirements for the Symantec LiveUpdate Administrator This section includes system requirements for the main Symantec LiveUpdate Administrator components. The installer package is approximately 42 MB. This does not include the JRE that is required for the Symantec LiveUpdate Administrator to function. The installed size is approximately 100 MB, which includes the JRE. The system requirements for the Symantec LiveUpdate Administrator are as follows:

Getting started System requirements for the Symantec LiveUpdate Administrator 11 Software Windows 2000 Server or Advanced Server with Service Pack 4 or higher Windows 2003 with Service Pack 1 or higher Windows XP Professional with Service Pack 3 Windows Vista (including SP1) Windows Server 2008 Java Runtime Environment (JRE) 1.5 or above Internet Explorer 6.0, Netscape 8.1, or Firefox 2.0 TCP/IP network protocol Hardware 150 MB hard disk space for the Symantec LiveUpdate Administrator, the JRE, and third-party tools. 5 GB hard disk space for the Manage Updates folder and for the temporary download folder, \TempDownload. Updates are copied to the TempDownload folder prior to their distribution. To install the Symantec LiveUpdate Administrator, you must log on as a power user with Administrator privileges. You must be able to create new local users, and to create new services. By default, the following ports are used by the Symantec LiveUpdate Administrator. 8080 8006 5432 Used by the Symantec LiveUpdate Administrator. Used by Tomcat for shutdown commands. While the Symantec LiveUpdate Administrator will work if this port is closed, Tomcat shutdown operations will not. Used by PostgreSQL database. If these ports are being used by other applications at the time you install the Symantec LiveUpdate Administrator, you will be prompted to enter alternate port numbers that the Symantec LiveUpdate Administrator can use. If a firewall is enabled for IP packets sent from the Symantec LiveUpdate Administrator system, destination IP ports such as HTTP (80), HTTPS(443), and FTP(23), should be allowed for communication. The Symantec LiveUpdate Administrator communicates with the Distribution Centers using these ports. Problems may occur while using a Terminal Service for installation. You should install the Symantec LiveUpdate Administrator directly from the console.

12 Getting started Installing the Symantec LiveUpdate Administrator Installing the Symantec LiveUpdate Administrator When you install the Symantec LiveUpdate Administrator (setup.exe), the Apache Tomcat 5.5 and PostgreSQL database 8.1 applications are also installed. The LUA Apache Tomcat and LUA PostgreSQL services for the Symantec LiveUpdate Administrator are installed and started so that the Symantec LiveUpdate Administrator is ready to use once the installation has completed. Both services are set to run automatically. If AutoRun is enabled, the setup program will run automatically. Otherwise, locate and run setup.exe in the root folder on the CD. To install the Symantec LiveUpdate Administrator 1 Run setup.exe, and then follow the on-screen instructions. 2 If the setup detects that the JRE has not been installed, you will be prompted to download and install it. The installation of the JRE is not controlled by the LiveUpdate Administrator installer. You can install the LiveUpdate Administrator once the JRE is installed. You can install the Java Runtime Environment from the Support folder on the LUA_CD, or download it from http://java.sun.com/. 3 In the Destination Folder window, click Next, or click Change to change the location of the installation file folder. Tomcat, the PostgreSQL database, LiveUpdate Administrator files, and the documentation are installed to this folder. The default installation folder location is C:\Program Files\Symantec\LiveUpdate Administrator\. 4 On the Manage Updates window, select the location where you will store downloaded updates, and then click OK. This location cannot be changed after installation. By default, downloads are stored at C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate Administrator\Downloads. 5 At the Symantec Administrator 2.1 admin user information window, type your username, password, and email address, and then click Next. 6 Click Install. If any or all of the default ports are currently being used, you are prompted. You can then specify alternate ports for the LiveUpdate Administrator to use. You must restart the LiveUpdate Administrator services after stopping the programs that are using these ports. It is not necessary to stop the service if you use a port other than the default. 7 Click Finish when the installation is complete.

Getting started Post-installation tasks 13 Running the LiveUpdate Administrator The LiveUpdate Administrator setup program adds a shortcut in the Programs menu under Symantec LiveUpdate Administrator > LiveUpdate Administrator 2.1. The installation also adds a shortcut to the desktop. To run the LiveUpdate Administrator 1 Do one of the following: Click Start, and go to Programs > Symantec LiveUpdate Administrator, and then click LiveUpdate Administrator 2.1. Double-click the LiveUpdate Administrator 2.1 icon on the desktop. 2 On the Symantec LiveUpdate Administrator 2.1 window, enter your user name and password and click Log On. If you forget your password, you can request that a temporary password be sent to the email address that you specified during installation. Use this temporary password to sign in to LiveUpdate Administrator. After you sign in, you will be prompted to reset your password. For security, the temporary password is valid only for a limited time. Using a remote connection to the Symantec LiveUpdate Administrator You can connect to the Symantec LiveUpdate Administrator (LUA) computer remotely. To connect, use the following command structure: http://hostname_of_lua_computer:8080/lua or http://ip_address_of_lua_computer:8080/lua If you have specified a different port number during installation, use that port number instead of 8080. Post-installation tasks After installation, you should do the following tasks: Add the products for which you will be downloading updates. To add products to the My Symantec Products list, click the Configure tab, and on the My Symantec Products window, click Add New Products. Configure Source Servers (optional).

14 Getting started Post-installation tasks By default, updates are downloaded from one of the Symantec LiveUpdate servers at http://liveupdate.symantecliveupdate.com. However, you can identify and configure one or more local servers from which clients can download updates, and designate servers that can be used in case they fail. To add a new source server, click the Configure tab, click Source Servers, and then click Add. Note: If you are using SAV 11.0, a source server has been pre-configured for SAV 11.0 updates. If you configure a Download or Distribution schedule with SAV 11.0 in the product list, then all available source servers will be searched for updates. Configure the Distribution Centers that you want to use for publishing updates. By default, two Distribution Centers are created during installation of the LiveUpdate Administrator, a Testing Distribution Center and a Production Distribution Center. When updates have been tested, they can be then be marked as "passed" and then published to the production distribution center, using a schedule you have determined. You can create a list of products that are associated with the distribution center. All locations in the distribution center will be in sync with the product updates of products configured in the list. For example, if you would like to download only the virus definitions for all of your Symantec products, you can select the products, and then specify the Virus Definitions component. Export the client settings host file, Settings.Hosts.LiveUpdate, used by Windows LiveUpdate clients to download updates from the Distribution Center, or export a liveupdt.hst file, used by Java LiveUpdate clients. To generate a host file, on the Configure tab, click Client Settings, and then select the Distribution Center that you want your LiveUpdate clients to use. Click Export Window Settings to export the Settings.Host.LiveUpdate file, or click Export Java Settings to create the Java LiveUpdate client file. You then copy the file to the \Program Files\Symantec\LiveUpdate directory on the LiveUpdate client computers. When the LiveUpdate client runs, it will use the host file for information on where to download updates. For information on how to perform management tasks, see the Symantec LiveUpdate Administrator User's Guide.

Getting started Uninstalling the Symantec LiveUpdate Administrator 15 Uninstalling the Symantec LiveUpdate Administrator You can uninstall the Symantec LiveUpdate Administrator using Add/Remove Programs in the Control Panel

16 Getting started Uninstalling the Symantec LiveUpdate Administrator