Upgrading SEPM to the latest ver.

I am assuming downloading Symantec_endpoint_protection_12.1.4_mp1a_sepm_en.exe is the file needed to upgrade SEPM correct?

Once the file is unziped do I run the setup.exe? or the Symantec endpoint protection manager.msi ?

What is Windowsinstaller-kb893809-x86.exe?

Thanks