Upgrading to MBAM 2.5 or MBAM 2.5 SP1 from Previous Versions
This topic describes the process for upgrading the Microsoft BitLocker Administration and Monitoring (MBAM) Server and the MBAM Client from earlier versions of MBAM.
Note You can upgrade directly to MBAM 2.5 or MBAM 2.5 SP1 from any previous version of MBAM.
Before you start the upgrade
Review the following information before you start the upgrade.
What to know before you start | Details | ||||||
---|---|---|---|---|---|---|---|
If you are installing the MBAM websites on one server and the web services on another server, you have to use Windows PowerShell cmdlets to configure them. |
The MBAM Server Configuration wizard does not support configuring the websites on one server and the web services on a different server. |
||||||
If you are upgrading to MBAM 2.5 or 2.5 SP1 from MBAM 2.0 or 2.0 SP1 in Windows Server 2008 R2: The Administration and Monitoring Website and the Self-Service Portal will not work if you install the required .NET Framework 4.5 software after Internet Information Services (IIS) is already installed. This issue occurs because ASP.NET cannot be registered correctly with IIS if the .NET Framework is installed after IIS has already been installed. |
To resolve this issue: Run aspnet_regiis –i from the following location: C:\windows\microsoft.net\Framework\v4.0.30319 For more information, see: ASP.NET IIS Registration Tool. |
||||||
Register an SPN on the application pool account if all of the following are true:
|
For instructions, see Planning How to Secure the MBAM Websites.
|
Steps to upgrade the MBAM Server infrastructure
Use the steps in the following sections to upgrade MBAM for the Stand-alone topology or the System Center Configuration Manager Integration topology.
To upgrade the MBAM Server infrastructure for Stand-alone topology
Uninstall previous versions of MBAM from Programs and Features and from web servers to make sure that information is not being written from MBAM clients to the MBAM infrastructure. For instructions, see Removing MBAM Server Features or Software.
Back up your databases.
Uninstall previous versions of MBAM from SQL Server by using Programs and Features, including SQL Servers hosting the MBAM reports via SQL Server Reporting Services. Remove any remaining MBAM server temporary files or folders from the database server and reporting services.
Note The databases will not be removed, and all compliance and recovery data is maintained in the database.
Install and configure the MBAM 2.5 or 2.5 SP1 databases, reports, and web applications, in that order. The databases are upgraded in place.
Update the Group Policy Objects (GPOs) using the MBAM 2.5 Templates to leverage the new features in MBAM, such as enforced encryption. If you do not update the GPOs and the MBAM client to MBAM 2.5, earlier versions of MBAM clients will continue to report against your current GPOs with reduced functionality. See How to Get MDOP Group Policy (.admx) Templates to download the latest ADMX templates.
After you upgrade the MBAM Server infrastructure, the existing client computers continue to successfully report to the MBAM 2.5 or 2.5 SP1 Server, and recovery data continues to be stored.
Install the latest MBAM 2.5 or 2.5 SP1 Client. Client computers do not need to be rebooted after the deployment.
To upgrade the MBAM infrastructure for System Center Configuration Manager Integration topology
Uninstall previous versions of MBAM from Programs and Features and from web servers to make sure that information is not being written from MBAM clients to the MBAM infrastructure. For instructions, see Removing MBAM Server Features or Software.
Back up your databases.
Uninstall previous versions of MBAM from SQL Server by using Programs and Features, including SQL Servers hosting the MBAM reports via SQL Server Reporting Services. Remove any remaining MBAM server temporary files or folders from the database server and reporting services.
Uninstall MBAM from the Configuration Manager server.
Note The databases and the Configuration Manager objects (baseline, MBAM supported computers collection, and Reports) will not be removed, and all compliance and recovery data is maintained in the database.
Update the .mof files.
Install and configure the MBAM 2.5 or 2.5 SP1 databases, reports, web applications, and Configuration Manager integration, in that order. The databases and Configuration Manager objects are upgraded in place.
Optionally, update the Group Policy Objects (GPOs), and edit the settings if you want to implement new features in MBAM, such as enforced encryption. If you do not update the GPOs, MBAM will continue to report against your current GPOs. See How to Get MDOP Group Policy (.admx) Templates to download the latest ADMX templates.
After you upgrade the MBAM Server infrastructure, the existing client computers continue to successfully report to the MBAM 2.5 or 2.5 SP1 Server, and recovery data continues to be stored.
Install the latest MBAM 2.5 or 2.5 SP1 Client. Client computers do not need to be rebooted after the deployment.
Upgrade support for the MBAM Client
MBAM supports upgrades to the MBAM 2.5 Client from any earlier version of the MBAM Client.
Ways to install the MBAM Client:
Upgrade the computers running MBAM Client all at once or gradually after you install the MBAM 2.5 Server infrastructure.
Install the MBAM Client through an electronic software distribution system or through tools such as Active Directory Domain Services or System Center Configuration Manager.
Related topics
Configuring the MBAM 2.5 Server Features
Got a suggestion for MBAM?
For MBAM issues, use the MBAM TechNet Forum.