Re-generating certificate in SAVCE 10.1

Restore communication without a backup copy of the pki folder
If you do not have a backup copy of the primary server's pki folder, you must perform the following steps:
Reinstall Symantec AntiVirus on the primary server.
Make the server a primary server in Symantec System Center.
Delete old certificates on the server's managed clients
Copy the server's new certificates and Grc.dat file to its managed clients.

To restore managed client communication after reinstalling Symantec AntiVirus server
On the managed client, stop the Symantec AntiVirus service.
Delete all certificates in the pki\roots folder in the client's Symantec AntiVirus program folder.
The following is the default path to the Symantec AntiVirus program folder:

%$OS Drive>\Program Files\Symantec Client Security\Symantec AntiVirus


On the Windows taskbar, click Start > Run.
In the Open box, type the following text, where %$server name> is the name of the Symantec AntiVirus server:

\\%$server name>\vphome


Click OK.
Copy the Grc.dat file from the vphome folder to the following folder:

C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\


Copy the xxx.x.servergroupca.cer file from the vphome\pki\roots folder to the \pki\roots folder on the client.
The following is the default location of the \pki\roots folder on the client:

\Program Files\Symantec Client Security\Symantec AntiVirus\pki\roots\


Start the Symantec AntiVirus service on the client.




For information about certificates, read Chapter 8 of the Symantec AntiVirus Corporate Edition Reference Guide (Savcref.pdf). The file is located on CD 1, in the Docs folder.


To find the Symantec AntiVirus program folder
On the Windows taskbar, click Start > Run.
In the Run dialog box, type the following:

cmd


Click OK.
At the command prompt, type the following:

net share


Under Share name, find the VPHOME listing.
The folder listed in the Resource column is the Symantec AntiVirus program folder and contains the Grc.dat file.

To set the DomainGUID value on a Windows computer
Start Windows Explorer.
Go to the Symantec AntiVirus program folder.
Open the pki\private-keys folder.
Find the file that has this format:

%$computer name>.%$key>.0.loginca.pvk


Write down or copy the %$key> portion of the file name.
Start the Registry Editor.
Go to the following registry key:

HKEY_LOCAL_MACHINE\SOFTWARE\Intel\LANDesk\VirusProtect6\CurrentVersion


In the right pane, double-click DomainGUID.
Delete the data, and replace it with the %$key> text that you copied in step 5.
Go to the following registry key:

HKEY_LOCAL_MACHINE\SOFTWARE\Intel\LANDesk\VirusProtect6\CurrentVersion\DomainData


In the right pane, double-click DomainGUID.
Delete the data, and replace it with the %$key> text that you copied in step 5.
Exit the Registry Editor.