Endpoint Protection

Dear Sir,

I scheduled my company's SEPM server to start perform definition update on 2:00am every night.

Everytime the update run to around 3:57am, the following error message will appear:

ERROR      spcVirDef64 ProductUtil Initialize Tomcat server xml file failed.

 

And the update process will keep retry process with following log:

 spcVirDef64 ProductUtil Response code: 0x16040000
 spcVirDef64 SesmLu Content catalogue lock acquired
 spcVirDef64 SesmLu Retry to acquire content catalogue lock
 spcVirDef64 SesmLu <?xml version="1.0" encoding="UTF-8" standalone="no"?>

 The process will run until 4:59am or later to start live update again.

Can i solve it, so definition update can take shorter time and do not affect other server's network backup performance?

I viewed the Log.liveupdate file and ran the symhelp.exe on SEP server, but i still cannot see any related issue that can help for resolve the issue, please help.

 

Exact SEPM version? Can you also run the symhelp tool to do error checking please? Have you tried a repair?

Thw SEPM version is 12.1.3001.165

Yes, i ran the symhelp tool to do error checking , and the report was generated.

I zipped it and attached on above post already, the file name is: [SAPSOL]__2015-09-10__10-19-51.zip

Hi,

Thank you for posting your query on Symantec community.

It seems downloaded liveupdate full.zip was not processed, refer this guide where almost similar problem is mentioned that you highlighted.

http://www.symantec.com/docs/TECH224720

Check scm_server_.log and Windows event logs & if could see similar error can freely follow the steps given in the above article.

Also SEP 12.1 RU3 is old versions and carries some vulnerability as well, it's recommended to upgrade the SEPM to the latest version.

This documents explains new enhancement and bug fixes of previous SEP releases:

http://www.symantec.com/docs/HOWTO101888

 

Thx for the detail infromation. I saw the article is apply to SEP 12.1 RU4, is it means that we need to upgrade the SEPM first?

Yes.

Upgrade both SEPM/SEP clients to keep network protected from known vulnerabilitie. 

SEP 12.1 RU6MP1a is the latest version.

Are you meant that, we need to upgrde the SEPM to RU6MP1 first, and then deploy the the SEP client to all users again with latest patch?

 

Yes that is right, first upgrade the SEPM to the current version which is 12.1 RU6 MP1a and then deploy the SEP 12.1 RU6 MP1a to the work stations

That's correct. But prior to upgrade all clients test latest version on 2-3 client machines.

Thanks for reply, let me try it first.