Symantec, Windows

Upgrade Symantec Validation and ID Protection (VIP) Gateway

The following step-by-step guide will take you through upgrading an existing VIP gateway installation to the latest release.

In this guide I will show the steps I taken for upgrading a 9.4 installation to 9.7. VIP Enterprise Gateway 9.7 brings a few new features over 9.4 which can be found in more detail at –


  • VIP Management portal access –
    • To download VIP gateway software packages
    • To download VIP SSL certificate
  • VMware permissions to take a snapshot of the VM (optional)

Step-by-step guide

  1. Take a snapshot of the VM before you begin
  2. RDP to the server and go to http://localhost:8232/vipegconsole/login.action
  3. Backup configuration

  4. Download the config backup locally to the server

  5. Uninstall old version of the Enterprise Gateway
  6. Downlod & install new version from VIP manager portal
    1. Entering local account details

  7. Download VIP certificate from VIP manager portal
  8. Login to the VIP console via –  http://localhost:8232/vipegconsole/login.action with the AdminVIP credentials set earlier
  9. Import the previously downloaded VIP certificate
  10. Import the exported configuration back
    1. Edit “E:\Program Files (x86)\Symantec\VIP_Enterprise_Gateway\conf\” by changing the value from “false” to “true” for “cross.version.import”

    2. Restart VIP GW by executing the following in PowerShell –  “Restart-Service vipegserver”
    3. Import the exported config ZIP archive (that was exported at the beginning) overwriting current configs

  11. Import the certificate

Final Check

  1. Start the following services:
    • LDAP Directory Synchronization
    • RADIUS Validation Server
  2. For the Self Service Portal IdP make sure you go to Edit > select HTTPS under “Protocol” and then select the appropriate SSL certificate
  3. For VIP Manager IdP Configuration  make sure you go to Edit > select HTTPS under “Protocol” and then select the appropriate SSL certificate

Once all the services have been configured and up and running – it should look something like this:


Leave a Comment

Your email address will not be published. Required fields are marked *