Installing
Symantec Protection for SharePoint Servers
using the installation wizard

You can install
Symantec Protection for SharePoint Servers
from the software package using an installation wizard.
After installation is complete, the Symantec Protection for SharePoint console is installed as a Windows Server service. Symantec Protection for SharePoint console is listed as Symantec Protection 6.0 for SharePoint Servers in the Services Control Panel. Symantec Protection Engine is listed as a separate entry in the Services Control Panel.
The
Symantec Protection for SharePoint Servers
service starts automatically when the installation is complete. Installation activities are recorded in the Windows Application Event Log and System log files at the default location C:\Program Files\Symantec\SharePoint\Logfiles.
Before you install
Symantec Protection for SharePoint Servers
, ensure that the ports 9455 and 9466 are available.
  1. To install
    Symantec Protection for SharePoint Servers
    using the installation wizard
  2. Log on to the computer on which you plan to install the product as administrator or as a user with administrator rights.
    • Local Administrator rights
    • Db_owner permissions on SharePoint configuration and SharePoint Admin content databases
    • Dbcreator server role
      Dbcreator server role is required during installation of SPSS because SPSS creates its own database. After successful installation in the farm (all servers), user can be removed from Dbcreator role.
  3. Run the
    Symantec Protection for SharePoint Servers
    software installer.
  4. On the main page, click
    Install
    .
  5. In the next installer screen window, click
    Install Symantec Protection 6.0 for SharePoint Servers (Full Install)
    .
    Symantec Protection Engine is installed first, then the Symantec Protection for SharePoint console is installed.
    The installer first checks if the computer has 64-bit Java Runtime Environment (JRE) 8.0 Update 232 or later but earlier than 261. If not, the installation process stops. You must manually install 64-bit Java Runtime Environment (JRE) 8.0 Update 232 or later but earlier than 261, and then continue with the installation of Symantec Protection Engine
  6. In the
    Required Components
    window, follow the on-screen instructions.
  7. On the Symantec Protection Engine License Setup page, click
    Browse
    to browse to select the appropriate license file.
    For more information on how to obtain a license file, see the
    Symantec Protection Engine Implementation Guide
    . You can also install the license at a later time through the Symantec Protection Engine console.
  8. Click
    Next
    .
    Symantec Protection Engine installation begins.
  9. In the
    Welcome
    panel, click
    Next
    .
  10. In the
    License Agreement
    panel, indicate that you agree with the terms of the Symantec Software License Agreement, and then click
    Next
    .
    If you do not indicate that you agree, the installation is canceled.
  11. In the
    Destination Folder
    panel, select the location to install Symantec Protection Engine, and then click
    Next
    .
    The default location is C:\Program Files\Symantec\Scan Engine.
  12. In the
    Initialization Methods
    panel, select one of the following:
    • Core server with user interface (requires JRE)
    • Core server only (does not require JRE)
  13. If you select Core server with user interface (requires JRE) in
    Initialization Methods
    panel, the installer first checks for the required JRE version. If not, the installation process stops.
  14. In the
    UI Authentication method
    panel, select one of the following:
    • Symantec Protection Engine-based authentication
    • Windows Active Directory-based authentication
    For more information, see
    Symantec Protection Engine Implementation Guide
    .
  15. Click
    Next
    .
  16. If you select
    Symantec Protection Engine-based authentication
    , in the
    Administrative UI Setup
    panel, configure the following options:
    Administrator Password
    Type a password for the administrator account that you intend to use to manage Symantec Protection Engine.
    Confirm Administrator Password
    Confirm the password by typing it again.
  17. If you select
    Windows Active Directory-based authentication
    , do the following in the order listed below:
    • In the
      UI Authentication method
      panel, select
      Windows Active Directory-based authentication
      , and then click
      Next
      .
    • In the
      Windows Active Directory-based Authetication Settings
      panel, in the
      Group Name
      box, type a valid security group name in the Domain\Groupname format.
    • Click
      Next
      .
      If the group name is incorrect, a
      Group Name Validation
      screen appears.
      Click
      Back
      to try the security group name again.
      Alternatively, click
      Next
      to continue the installation without a valid group name.
      The Symantec Protection Engine service starts after installation but you cannot access the console. Once the installation is complete, you must go to configuration.xml and enter the user name to access the console.
  18. In the
    Administrative UI Setup
    panel, configure the following options:
    Administrator Port
    Type the port number on which the Web-based console listens.
    If you change the port number, use a number that is greater than 1024 that is not in use by any other program or service. The default port number is 8004. You can disable the console by typing 0. If you disable the console, you can configure Symantec Protection Engine by editing the configuration file.
    SSL Port
    Type the Secure Socket Layer (SSL) port number on which encrypted files are transmitted for increased security.
    The default SSL port number is 8005. If this port is already in use, select an SSL port that is not in use by any other program or service. Use a port number that is greater than 1024.
  19. Click
    Next
    .
  20. In the
    URL Filtering and URL Reputation
    panel, select the following options if required.
    • Enable URL Filtering and download URL Filtering definitions
    • Enable URL Reputation and download URL Reputation definitions
  21. Click
    Next
    .
  22. In the Reputation-based Protection (Insight), select an appropriate Symantec Insight Aggression Level for better protection, and then click
    Next
    .
  23. In the
    Ready to Install the Program
    panel, click
    Install
    .
  24. Click
    Finish
    to complete installation of Symantec Protection Engine.
    Once installation of Symantec Protection Engine is complete, the installation of Symantec Protection for SharePoint console automatically begins.
  25. In the
    Welcome
    panel, click
    Next
    .
  26. In the
    License Agreement
    panel, indicate that you agree with the terms of the Symantec Software License Agreement, and then click
    Next
    .
    If you do not indicate that you agree, the installation is canceled.
  27. In the
    Customer Information
    panel, in the
    User Name
    box, type the account name under which you are installing the Symantec Protection for SharePoint console.
  28. In the
    Organization
    box, type the name of your organization.
  29. Select who will have access to the console after installation.
    You can limit access to the account under which the console is installed, or you can let all users access the console.
  30. Click
    Next
    .
  31. In the
    Destination Folder
    panel, select the location to install Symantec Protection for SharePoint Servers, and click
    Next
    .
    The default location is C:\Program Files\Symantec\.
  32. In the
    SPSS Database Name
    panel, specify the database name, which is used by Symantec Protection for SharePoint Servers for creating all the tables required for working of Symantec Protection for SharePoint Servers, and click
    Next
    .
  33. Specify the user name and password for the account that is used to log on to the Symantec Service.
    The logon user must also have the following service-level permissions:
    • Local Administrator rights
    • Db_owner permissions on SharePoint configuration and all SharePoint content databases
    • ‘Log on as a service’ right
    The user account credentials must be of a user who configured SharePoint farm using SharePoint Configuration and Technology wizard.
    The user name must be in the format domain\username or computer\username.
    After successful installation in the farm (all servers), the service logon user must also have Db_owner permission on SPSS database.
  34. Click
    Next
    .
  35. In the
    SharePoint Services Stop Information
    panel, indicate whether you agree to stop Microsoft IIS and Microsoft SharePoint Server services.
    If you do not want to stop IIS, select
    I do not agree that the services can be stopped
    . This option does not allow the installation to proceed.
  36. Click
    Next.
  37. In the
    Ready to Install the Program
    panel, click
    Install
    to begin the installation.
  38. Click
    Finish
    when installation is complete.
  39. Verify that the service user is db_owner of SharePoint content, configuration, and SPSS databases.