How Endpoint Upgrade Assistant works

Endpoint Upgrade Assistant is a tool that analyzes your McAfee ePO environment, reports the information you need to prepare for an upgrade, and deploys and tracks their status.

Analyzing your environment

Endpoint Upgrade Assistant analyzes the McAfee ePO database, determines the software installed on endpoints in your environment, and reports:

  • Minimum requirements for upgrading to Endpoint Security.
  • Other McAfee products running on endpoints that require an upgrade to maintain compatibility with Endpoint Security.
  • Problems that prevent upgrades.

By default, Endpoint Upgrade Assistant runs an analysis automatically in the background when it's installed, then re-analyzes your environment weekly using the Re-analyze Environment option. It displays results in the Environmental Overview section at the top of the tool's interface. It also displays a notification on the McAfee ePO landing page when 80% of your endpoints are ready to upgrade.

You can configure options for analyzing, like selecting groups of endpoints or specifying a different schedule, and re-analyze your environment whenever you need to. You can also change when upgrade notifications appear in McAfee ePO.

  • Depending on the number of endpoints, the analysis can take several minutes to complete.
  • A new user session will require re-analysis.

Checking for known conditions that would block migration

Endpoint Upgrade Assistant includes the option to deploy the Health Check Tool which when executed on an endpoint, runs a series of tests to look for known conditions that would likely cause the migration to fail. After these tests are executed, the results are uploaded to the Endpoint Upgrade Assistant extension for further analysis.

The Health Check Tool is deployed using an Agent task, and its results are dependent on endpoint availability. The possible outcomes of the Health Check Tool are:

  • Health Check Passed — All tests passed and the endpoint is in good health to upgrade.
  • Health Check Failed — At least one test failed. In the Endpoint Upgrade Assistant extension, you can drill down to the exact tests that failed, and a link to a KB detailing next steps is provided.
  • Health Check Pending — The Health Check Tool has been deployed, but the results are still pending. This may be a result of the endpoint being offline, communication issues, or conditions of the endpoint blocking the tool's execution.
  • Health Check Timed Out — After 4 days, if the results are not received from the endpoints, it will be marked as timed out.

Reporting upgrade readiness

Endpoint Upgrade Assistant displays data about endpoints and software in your environment, which you can use to identify endpoints that are:

  • Blocked from analyzing — You need to resolve the blocking issue, then re-analyze the endpoints.
  • Running products that Endpoint Upgrade Assistant can't upgrade — You need to upgrade these products, then re-analyze the endpoints.
  • Ready to upgrade — You can use Endpoint Upgrade Assistant to select the products and versions to deploy, verify that all required software is available, then upgrade these endpoints with a single deployment task.

Tagging endpoints for upgrades

Endpoints with similar issues are grouped, so that you can tag them. Each time you tag a group of endpoints, Endpoint Upgrade Assistant creates a tag called UA_<timestamp> in the McAfee ePO Tag Catalog. This lets you tag all the endpoints that require the same upgrade, then create a deployment task that deploys the upgrade to them, even if the endpoints are in different System Tree groups.

Deploying installation packages

When your endpoints are ready to upgrade, Endpoint Upgrade Assistant supports multiple options to deploy the installation packages that include all selected products and the Upgrade Automation client software.

  • Deployment task — Use a deployment task that was created with Endpoint Upgrade Assistant or with McAfee ePO to deploy the installation packages to all selected endpoints. You can track the status of deployment tasks from Endpoint Upgrade Assistant.
  • Third-party tool — Use a third-party deployment tool like Microsoft System Center Configuration Manager or IBM BigFix to deploy the installation packages to all selected endpoints. You can use the same tool and automated processes that you use to upgrade other products in your environment.
  • Custom installation package — Use a McAfee ePO deployment task or third-party tool to deploy a custom installation package to all selected endpoints. Use the Endpoint Upgrade Assistant Package Creator tool to create the custom package.

For more information about using Endpoint Upgrade Assistant, you can watch the product training video.