Hi everyone:

    My company need to upgrade all SEP clients to newest version - 12.1.4100.4126 and migrating all existing clients to a new SEPM server. Until now, most of Workstaions/Servers installed successfully except one printing server with operating system: Windows Server 2008 Standard SP2.

    I have tried to remote push the installation package from new SEPM server, but it return an error message "Fail to install, rollback to old version" on the console. Also, I exported the installaiton package and copied into the printing server, it failed again without any error message.

    Instead of the version 12.1.4100.4126, I tried to installed the older verison: 12.1.1101.401 RU1 MP1, it was successful to install.

    Thus, I tried to upgrade SEP from 12.1.1101.401 RU1 MP1 to 12.1.4100.4126, something critical happen to printing server: The firewall module could not be loaded, and the network driver unable to start, thus I uninstalled the SEP and the network driver can be started up again.

    But in my testing environment, I want to reproduce that issue by the following steps:

1. Install SEP 12.1.1101.104 RU1 MP1 on Windows Server 2008 Standard SP2 - Success

2. Exported and copied the SEP 12.1.4100.4126 installation package to Windows Server 2008 - Success

3. Directly install SEP 12.1.4100.4126 without uninstalling old version - Fail(Nothing happened to network driver, just fail to install)

    I checked the SEP 12.1.4100.4126 supporting platform from here, Windows Server 2008 SP2 was listed.

Please help. many thanks.

--

Alex

BR,

Please post SEP_INST / SIS_INST.log

available %temp%

SIS_INST.LOG is located at the following location:
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec Endpoint Protection\12.1.XXXX\Data\Install\Logs

Hi James007:

    I edited the original article, please check. Thanks.

--

BR,

Alex

have you try cleanwipe tool for uninstall complete SEP client ? than you can try install sep client.

 

Can you try the following steps:

1 - Back up the registry before proceeding further.
2 - Open Registry Editor
3 - Browse to HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders
4 - Select the Expandable String Value 'AppData' and change the value from %APPDATA% to : %USERPROFILE%\AppData\Roaming
5 - Close the registry editor

Try to install SEP client.

Hi ncnylon.

Please check below solution also

https://www-secure.symantec.com/connect/forums/install-sep-client-fails#comment-10144011

Try the step of the article

SEP client installation rolls back at creating install cache.

Article:TECH167813

|

Created: 2011-08-23

|

Updated: 2012-06-05

|

Article URL http://www.symantec.com/docs/TECH167813

--Edit--

Symantec Endpoint Protection 12.1 client install rolls back, returning 1603

Article:TECH170259

|

Created: 2011-09-23

|

Updated: 2011-12-07

|

Article URL http://www.symantec.com/docs/TECH170259

 If the above article not come helpful then perform the CleanWipe on client.

Hi everyone:

I tried all possible solutions provided, but still cannot install 12.1.4100.4126.

I will submit a ticket tomorrow, thanks.

Post SIS_INST.log as well

What logs do I need to gather in order to troubleshoot a failed SEP 12.1 client installation?

Please review, thanks

--

BR,

Alex

DeleteFileAction: target does not exist: C:\Documents and Settings\All Users\Start Menu\Programs\Symantec Endpoint Protection\Symantec Endpoint Protection.lnk
Failed to acquire shell interface.

Symantec Endpoint Protection 12.1 client install rolls back, returning 1603

Article:TECH170259

|

Created: 2011-09-23

|

Updated: 2011-12-07

|

Article URL http://www.symantec.com/docs/TECH170259

Looks like it's having an issue with the teefer driver install. Can you run cleanwpe and try a fresh install?

Also, see if you can install the unmanaged client from the download ISO and if that works you can make it managed.

Last resort you can try installing with only AV component. If it installs, you can add NTP if you wish.

Hi _Brian;

    I tried to run cleanwipe as well, but the process of cleanwipe fail to finish at step 10:

Attachment contained all the related log files.

--

BR,

Alex

have you try run local admin acount ?

Hi James007:

    Of cause I'm using local admin to run every program. Thanks for reply!

--

BR,

Alex

Try to run Cleanwipe tool copy in c: drive and run again.

Can you post teeferinstall.log file?

Hi all:

    Thanks for all suggestions. This issue is resolved.

Because of the VeriSign certificate expired, I just updated this patch and the installation process finished successfully.

--

BR,

Alex

See below articles for sep 12.1.4 related issue. Symantec Endpoint Protection 12.1 RU4 installation or migration on Windows fails due to outdated root certificate Article:TECH217284|Created: 2014-05-06|Updated: 2014-05-15|Article URL http://www.symantec.com/docs/TECH217284

Had a similar issue recently where the installer went to about 99% then rolled back. Root certificates were the issue. Of course the installation log provides no clues to that being the cause, After hours of stuffing around with support we independenty found the issue was the root certificates ... the following article appeared shortly after we resolved the issue and reported our findings

http://www.symantec.com/business/support/index?pag...

Give it a go and good luck!

Thanks for help.

    It's all about the root certificate issue, I updated the newest root certificates and the client was successfully installed.

--

BR,

Alex

What are the steps you took to get the newest root certificates?

Hi ThaveshinP:

    I just updated this patch and reinstalled the client. Everything work properly.

--

BR,

Alex