Endpoint Protection

Hello, I am using a 2003 R2 x64 System.  I had Symantec Endpoint 11.05 installed, it stopped working for no apparent reason.  When I went to start the database in services, it would fail to start.  So I followed some forum suggestions that included repairing the install.  This failed.  So I tried uninstalling/reinstalling.  This netted the same result.  I have check the ports in use, and none of them conflict.  I have changed the ports during install, this does not affect the install. 

So I uninstalled, ran cleanwipe, ran ccleaner reg cleanup, deleted dsn and manually removed the reg keys and folders that were left older.  I then downloaded 11.0.6 and tried to install and during the install I get the same error, when it's time in the install to create the database, I get a "Failed to start embedded Database"

The event log shows an eventid 1 from Source ASA 9.0

Err.log shows this
06/06 21:16:30. Unable to initialize requested communication links

I have less than 100 clients, I'm really stuck, are there any other ideas?

Joe

hi,
post the "Program Files\Symantec\Symantec Endpoint Protection Manager\tomcat\logs\installLog.err' here. Hope you have ensured that no other application is running in port 2638 as the embedded DB uses this port.

Hi,

Also attach your SEPM_INST file. You can get this file by Start>Run>%temp%.

There is possibility of port conflict. Hard to say anything though without the logs. Check anything is using port 2638.

Thank you.

Moin

Hi

Please paste the SEPM_INST.log from the following location

%temp%\SEPM_INST.log

Also you may try the following

Uninstall SEPM
Delete the following folders
C:\Program Files\Symantec
C:\Program Files\Common Files\Symantec Shared
C:\Docs & Settings\All Users\Application Data\Symantec


Then try to install SEP Manager. 

Check this article

Title: 'Error " Failed to start embedded database port 2638" when installing Symantec Endpoint Protection Manager (SEPM)'
Web URL: http://service1.symantec.com/support/ent-security.nsf/docid/2007101009445948?Open&seg=ent

Also did you installed any other aplication?

Thanks for the quick reply's, I am going to be working on this today.  I thought I would mention that I ran the netstat -b >ports.txt and found that none of the ports were in use.  I also have tried many different ports.

I'll write back after trying the suggestions above.

Thank you

install_log.err


Creating database failed. ErrorCode = -9999 Message: Failed to start the Embedded database.
java.lang.Exception: Failed to start the Embedded database.
    at com.sygate.scm.install.util.EmbeddedDBCreator.createDB(EmbeddedDBCreator.java:122)
    at com.sygate.scm.install.ui.MainFrame.prepareDatabase(MainFrame.java:3854)
    at com.sygate.scm.install.ui.MainFrame.configureDB(MainFrame.java:1183)
    at com.sygate.scm.install.ui.smb.WizardFrame.nextBtnActionPerformed(WizardFrame.java:507)
    at com.sygate.scm.install.ui.smb.WizardFrame.access$200(WizardFrame.java:62)
    at com.sygate.scm.install.ui.smb.WizardFrame$2$1.construct(WizardFrame.java:278)
    at com.sygate.scm.install.util.SwingWorker$2.run(SwingWorker.java:121)
    at java.lang.Thread.run(Thread.java:619)
MainFrame >> configureDB > Creating database failed. SEPM's error code is [-9999]. Error message is [Failed to start the Embedded database.].

Attached is SEM Install Log

What does the SEP Support Tool have to say?  I would try the preinstall check for SEPM.

Title: 'The Symantec Endpoint Protection Support Tool'
http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2008071709480648

sandra

Check the following registry entry for Permission issues

Registry Entry: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\

You may have to add the following
1) Administrator.
2) Creator Owner.
3) System.
4) Users.

I checked they are all present and set to allow full control.

Any Other Suggestions?

I've uploaded the support tool report.  I chose all the options when I ran it.  It netted one error:

Failed The Symantec Reputation database was not accessable to check the files that do not have a digital signature. 

I'm assuming this is because the server doesn't have access to the internet.

Thanks

Will check this out, in the mean time here is a document about the Support Tool

Title: 'About the Load Point Analysis feature in the Symantec Endpoint Protection Support Tool'
Web URL: http://service1.symantec.com/support/ent-security.nsf/docid/2009092215125548?Open&seg=ent

Yes, the error is because of a lack of internet access.  See the above-referenced document for more info on how to complete the test on another machine.

The Support Tool does show DCOM set to Impersonate.  We are looking for Identify.  See the end if this document:

Title: 'Troubleshooting Symantec AntiVirus Corporate Edition and Symantec Endpoint Protection installations: Checking rights and permissions'
http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2002103013521548

It did not gather event logs, which is unusual.  You were logged in as a full admin (either local admin or domain admin with local admin rights)?

sandra

SST log:
OS - Microsoft Windows Server 2003 R2, Enterprise x64 Edition Service Pack 2 (build 3790)        
Running as - 32bit application in WOW64        
Database Type: Sql Server
Database Host: //localhost
Database User: sem5
Database Name: sem5

- You are not using Embedded Database
- check your SQL service is up and running
- also can not see any SEPM logs in the SST
- Please use console session if you are installing SEPM remotely or running SST remotely

Thank you.

Installation never completed successfully.

It appears that you attempted to install SEPM through RDP in normal mode. Please uninstall SEPM using Add/remove programs, Make sure all folders below are deleted:
..\Program files (X86)\Symantec\symantec endpoint protection manager
..\Program files (X86)\Symantec\Liveupdate
C:\Documents and settings\allusers\application data\symantec\liveupdate

Reboot the server

if you want to do RDP in session 0. follow the instructions below:
Start -> Run -> Type "mstsc /console"

Once logged in as Domain or Local Administrator, Install SEPM as normal process.

I think sandra.g gave the solution. Set the DCOM to Identify then reboot the Server. After reboot double check DCOM setting. Install SEPM should go through.

Hi,

I've the same error, refers to  install_log.err:

java.sql.SQLException: JZ006: Caught IOException: com.sybase.jdbc2.jdbc.SybConnectionDeadException: JZ0C0: Connection is already closed.
 at com.sybase.jdbc2.jdbc.ErrorMessage.createIOEKilledConnEx(ErrorMessage.java:796)
 at com.sybase.jdbc2.jdbc.ErrorMessage.raiseErrorCheckDead(ErrorMessage.java:837)
 at com.sybase.jdbc2.tds.Tds.handleIOE(Tds.java:3967)
 at com.sybase.jdbc2.tds.Tds.handleIOE(Tds.java:3912)
 at com.sybase.jdbc2.tds.Tds.language(Tds.java:766)
 at com.sybase.jdbc2.jdbc.SybStatement.sendQuery(SybStatement.java:1525)
 at com.sybase.jdbc2.jdbc.SybPreparedStatement.sendQuery(SybPreparedStatement.java:1230)
 at com.sybase.jdbc2.jdbc.SybStatement.executeUpdate(SybStatement.java:1699)
 at com.sybase.jdbc2.jdbc.SybPreparedStatement.executeUpdate(SybPreparedStatement.java:115)
 at com.sygate.scm.install.ui.MainFrame.insertBasicMetadata(MainFrame.java:4064)
 at com.sygate.scm.install.ui.MainFrame.initializeData(MainFrame.java:2247)
 at com.sygate.scm.install.ui.MainFrame.configureDB(MainFrame.java:1263)
 at com.sygate.scm.install.ui.smb.WizardFrame.nextBtnActionPerformed(WizardFrame.java:498)
 at com.sygate.scm.install.ui.smb.WizardFrame.access$200(WizardFrame.java:61)
 at com.sygate.scm.install.ui.smb.WizardFrame$2$1.construct(WizardFrame.java:275)
 at com.sygate.scm.install.util.SwingWorker$2.run(SwingWorker.java:121)
 at java.lang.Thread.run(Thread.java:619)

This happen immediately after sepm installation and stated initializing the database failed.

Pls advise.

regards,
Jimmy