Endpoint Protection

 View Only
  • 1.  Installing Symantec EPP update on a RODC

    Posted Dec 29, 2014 10:01 AM

    I have attempted to upgrade the EPP software on a RODC but encountered software installation being rolled back halfway. After doing research, this is the proposed solution from Symantec :

    Certificate error occurs when attempting to install or upgrade Symantec Endpoint Protection

    http://www.symantec.com/business/support/index?page=content&id=TECH217284

     

    1) If i follow option on the above article, I will hit the issue below (SSL/TKS communication problems) and our NPS on the same RODC will fail.

    SSL/TKS communication problems after you install KB 931125

    http://support.microsoft.com/kb/2801679

     

    2) I cant opt for slective updates on the necessary root certificates to verify the Symantec Endpoint Protection binaries, because the GPO of my administrative account prevents me from launching MMC to access the Computer Certificate Store.

     

    Is there any suggestions or solutions for this paticular issue? Thanks!



  • 2.  RE: Installing Symantec EPP update on a RODC
    Best Answer

    Posted Dec 29, 2014 01:46 PM

    Move to 12.1.5. This was an issue in 12.1.4, which was fixed in 12.1.5.

    Review these links:

    http://www.symantec.com/docs/TECH218029
    http://www.symantec.com/docs/TECH217284

    Note: As of 12.1.5, if the required certificates are missing, Symantec Endpoint Protection installs the certificates during installation instead of prompting you to to install them

    .



  • 3.  RE: Installing Symantec EPP update on a RODC

    Posted Dec 30, 2014 08:03 AM

    Hello Brian, thank you for the suggestion. We've thought about doing just that but sadly our current situation does not allow for an upgrade to 12.1.5, at the moment. We're dealing with a large number of clients, so preliminary tests will take quite some time.

    Meanwhile, are there any specific Certificate replacement fixes available? Thanks again!



  • 4.  RE: Installing Symantec EPP update on a RODC

    Posted Dec 30, 2014 08:07 AM

    As far as I know, only what the articles linked above point to.



  • 5.  RE: Installing Symantec EPP update on a RODC

    Posted Dec 31, 2014 10:40 AM

    Thank you, will mark this as solved for reference.