Media Encryption clients are managed by the Media Encryption server and also there is an SQL database, which contains encryption keys for the encrypted devices. The DB can be also embedded on the server machine.
File Encryption (in case there is one) is also a standalone client, which is used for directory encryption. This product is EOL and also no longer available in newer Endpoint Security versions.
Starting from R76, the Endpoint Security Server is part of the Security Management Server.
Endpoint Security Server can run only on a distributed Security Management Server (StandAlone configuration is not supported).
To upgrade the existing clients (Media Encryption and Full Disk Encryption clients), you will have to create a PreUpgrade package.
The purpose of the PreUpgrade package is to uninstall the Media Encryption and Full Disk Encryption clients, and instead of them install Media Encryption and Full Disk Encryption blades.
During the upgrade, the Media Encryption client will be removed. Full Disk Encryption will be removed, as well, but the drive will NOT be decrypted.
File Encryption clients should be uninstalled manually from the machines (in case there is a client on these machines).
The server should be fresh installed and cannot be upgraded sk65202.
Information about Secure Access can also be found in sk65202.