Endpoint Protection

Can you please paste the install logs?

Hello,

Are you Installing SEPM with SQL database or Embedded Database?

Well, thats Sybase (Embedded Database).

Are you trying to install SEPM as an Additional Site?

Check this article

Title: 'Error " Failed to start embedded database port 2638" when installing Symantec Endpoint Protection Manager (SEPM)'
Web URL:  http://www.symantec.com/business/support/index?page=content&id=TECH102621

Is SEP install is failing or SEPM?

It's an Embedded database.

SEPM installation is successfully done, but it fails during the database formation.

It's a fresh install.

Check the install.err see if you can find anything from that.

The above logs are the install.err logs.

is the db on the same box or diff box? did u try the sql client re-install?

Run the SEP Support tool on that machine, it may show what is going on. You can post the log here (.sdbz file) if you like.

Change the ext to .sdbz

Attachment(s)

FILESERVER__2011_04_09__19_39_04_LP_Full.xls   842 KB 1 version

Do a repair to SEPM from add/remove programs..

Are you sure the SEPM is installed? I don't see any of the logs from it. I do see a client installation log (though the client isn't installed either).

Are you logged in remotely or are you physically in front of the machine?

Has this server been locked down?

It also appears you are installing MR1. If this is the case, please download the latest version (11.0.6300 or RU6 MP3) and attempt installing that.

We have tried both MR1 and MR3 its the same issue.

Repairing does not help.

Wheter java is installed in this systwm?If anything is present uninstall and try....

done... still the issue is there.

You didn't answer the other questions

1) Are you sure the SEPM is installed? I don't see any of the logs from it. I do see a client installation log (though the client isn't installed either).

2) Are you logged in remotely or are you physically in front of the machine?

3) Has this server been locked down?

Looking at the log files you posted, the SEPM doesn't even look like it is installed. If the system is locked down, there may be an issue gathering the appropriate data which may explain why the SEPM cannot be installed. Logging in remotely can cause issues as well with the installation and configuration of the SEPM, so if you are not physically in front of the machine I would test that next. Along with that, the latest version is 11.0.6300 (RU6 MP3) I would strongly urge you to attempt installing at least RU6a if not the latest version. 

This machine is more than likely infected and that could be part of the reason the installs are failing.

You will want to run a scan with SERT and run a full system scan with the latest definitions.

How To Use the Symantec Endpoint Recovery Tool with the Latest Virus Definitions

http://www.symantec.com/business/support/index?page=content&id=TECH131732

If the latest definitions do not remove those threats then you will want to submit them to Security Response.  It would likely be best to open a support case for further help on that.

Also, you are installing SEP 11 MR1, you will really want to get to a more recent build (SEP 11 RU6MP3) like Thomas suggested.  Also, the log which it says it created in your screenshot would be helpful as well in determining the exact reason for the install failure.

Thomas:

1) I am physically on the machine.

2) Yes, I'm 100% sure of SEPM being installed on the machine.

3) Server is not locked down.

Ben:-

The machine is not infected, because i tried to install SEPM on another machine i.e. XP machine, but it would still give me the same error and same situation.

Hi,

How much time does it take to throw this error ?

Is IPv6 or NW IPX/SPX listed under network stack ?

Is there enough physical memory on server ? 1 GB is minimum required.

It takes good 5-7 minutes to come up with this error.

Also No IPv6 or NW IPX/SPX are listed.

Just because you tried to install the product on a different machine and got the same error does not mean this machine is not infected.  The Support Tool you uploaded which shows the seemingly randomly named executables in the user temp directory (and one of them currently running making outbound connections) leads me to believe the machine is infected.  A byproduct often of being infected is not being able to install our product (or any AV for that matter).  Unless you can validate what those two files are, and what they do, likely they are some type of threat.  Can I say with 100% certainty that is stopping you from installing the the SEPM, no.  But it certainly is important enough to investigate further.

The install_log.err, like the screenshot in your original post says, would be the best place to start looking into why the install is failing.

Thomas,

I would take care of that machine and would do a full scan, now i tried today again to install SEPM on a new XP machine, but i still get the same error.

Is there something wrong with my machine? or is it missing on something?

Well you are installing it on XP, which I don't recommend. Please post the SEP Support tool logs from the new machine.

Hi,

I have faced similar issue recently.

In my case I deleted all the Symantec folders, removed SEPM completely from my machine.

Reinstalled SEPM & it worked. 

Following thread is also talking about same

https://www-secure.symantec.com/connect/forums/unable-install-sep-manager-hangs-database-creation

Hello Chetan,

I have tried that, but it would still give me the same error.

Minnie

I may have found the cause to the problem.

Visual C++ and .Netframework was missing on the machine.