Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

LiveUpdate thinks is is 6 months in the future and won't update definitions

Created: 17 Jan 2013 • Updated: 17 Jan 2013 | 6 comments
This issue has been solved. See solution.

We have about 300 computers that are managed by SEPM, and the server will not get the latest updates from LiveUpdate.  When I manually force a LiveUpdate, I noticed the date and time are over 6 months in the future.  See the results below.  Does anyone know what the issues is, and where SEPM is getting this Date and Time from?! 

July 26, 2013 5:18:18 AM PDT:  LiveUpdate will start next on Friday, July 26, 2013 9:18:18 AM PDT on <Server Name>.  [Site: <Site Name>]  [Server: <Server Name>]
July 26, 2013 5:18:18 AM PDT:  LUALL.EXE finished running.  [Site: <Site Name>]  [Server: <Server Name>]
July 26, 2013 5:18:18 AM PDT:  LiveUpdate succeeded.  [Site: <Site Name>]  [Server: <Server Name>]
July 26, 2013 5:18:18 AM PDT:  LUALL.EXE successfully updated the content. Return code = 0.  [Site: <Site Name>]  [Server: <Server Name>]
July 26, 2013 5:18:13 AM PDT:  No updates found for Symantec Endpoint Protection Win64 12.1 (English).  [Site: <Site Name>]  [Server: <Server Name>]
July 26, 2013 5:18:13 AM PDT:  No updates found for Symantec Endpoint Protection Win32 12.1 (English).  [Site: <Site Name>]  [Server: <Server Name>]
July 26, 2013 5:18:13 AM PDT:  No updates found for Centralized Reputation Settings 12.1.  [Site: <Site Name>]  [Server: <Server Name>]
July 26, 2013 5:18:13 AM PDT:  No updates found for SONAR scan engine Win32 11.0.  [Site: <Site Name>]  [Server: <Server Name>]
July 26, 2013 5:18:13 AM PDT:  No updates found for AP Portal List 12.1 RU2.  [Site: <Site Name>]  [Server: <Server Name>]
July 26, 2013 5:18:12 AM PDT:  No updates found for TruScan proactive threat scan commercial application list Win32 11.0.  [Site: <Site Name>]  [Server: <Server Name>]
July 26, 2013 5:18:12 AM PDT:  No updates found for SONAR scan whitelist Win64 11.0.  [Site: <Site Name>]  [Server: <Server Name>]
July 26, 2013 5:18:12 AM PDT:  No updates found for Virus and Spyware definitions Win32 12.1.  [Site: <Site Name>]  [Server: <Server Name>]
July 26, 2013 5:18:12 AM PDT:  No updates found for Intrusion Prevention signatures Win64 11.0.  [Site: <Site Name>]  [Server: <Server Name>]
July 26, 2013 5:18:12 AM PDT:  No updates found for Client Intrusion Detection System signatures 12.1.  [Site: <Site Name>]  [Server: <Server Name>]
July 26, 2013 5:18:12 AM PDT:  Successfully downloaded the Revocation Data security definitions from LiveUpdate. The security definitions are now available for deployment.  [Site: <Site Name>]  [Server: <Server Name>]
July 26, 2013 5:18:12 AM PDT:  Cleaned up 1 LiveUpdate downloaded content  [Site: <Site Name>]  [Server: <Server Name>]
July 26, 2013 5:18:11 AM PDT:  No updates found for SONAR scan engine Win64 11.0.  [Site: <Site Name>]  [Server: <Server Name>]
July 26, 2013 5:18:11 AM PDT:  No updates found for Submission Control signatures 11.0.  [Site: <Site Name>]  [Server: <Server Name>]
July 26, 2013 5:18:11 AM PDT:  No updates found for Submission Control signatures 12.1.  [Site: <Site Name>]  [Server: <Server Name>]
July 26, 2013 5:18:11 AM PDT:  No updates found for SONAR scan data 11.0.  [Site: <Site Name>]  [Server: <Server Name>]
July 26, 2013 5:18:11 AM PDT:  No updates found for Symantec Whitelist 12.1.  [Site: <Site Name>]  [Server: <Server Name>]
July 26, 2013 5:18:11 AM PDT:  No updates found for SONAR Heuristics engine 12.1.  [Site: <Site Name>]  [Server: <Server Name>]
July 26, 2013 5:18:11 AM PDT:  No updates found for SONAR scan whitelist Win32 11.0.  [Site: <Site Name>]  [Server: <Server Name>]
July 26, 2013 5:18:11 AM PDT:  No updates found for TruScan proactive threat scan commercial application list Win64 11.0.  [Site: <Site Name>]  [Server: <Server Name>]
July 26, 2013 5:18:11 AM PDT:  No updates found for SONAR scan commercial application engine 11.0.  [Site: <Site Name>]  [Server: <Server Name>]
July 26, 2013 5:18:11 AM PDT:  No updates found for SEPM LiveUpdate Database 12.1.  [Site: <Site Name>]  [Server: <Server Name>]
July 26, 2013 5:18:10 AM PDT:  No updates found for Extended File Attributes and Signatures 12.1 RU2.  [Site: <Site Name>]  [Server: <Server Name>]
July 26, 2013 5:18:10 AM PDT:  No updates found for Virus and Spyware definitions Win64 12.1.  [Site: <Site Name>]  [Server: <Server Name>]
July 26, 2013 5:18:10 AM PDT:  No updates found for Symantec Endpoint Protection Manager Content Catalog 12.1.  [Site: <Site Name>]  [Server: <Server Name>]
July 26, 2013 5:18:10 AM PDT:  No updates found for Intrusion Prevention signatures Win32 11.0.  [Site: <Site Name>]  [Server: <Server Name>]
July 26, 2013 5:17:46 AM PDT:  LUALL.EXE has been launched.  [Site: <Site Name>]  [Server: <Server Name>]
July 26, 2013 5:17:41 AM PDT:  LiveUpdate started.  [Site: <Site Name>]  [Server: <Server Name>]

Comments 6 CommentsJump to latest comment

.Brian's picture

Can you restart the SEPM and try again?

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

PCressey's picture

Thank you for the quick replies.

I restarted the server, but LiveUpdate still thinks it is July 2013.

The server time is the correct local time.  I also did a GetDate() on the SQL server to randomly check if the DB time was different, but it is not.

Any other ideas?

SebastianZ's picture

Can you start the liveupdate session manually from SEPM -> Admin -> Server -> Local Site - this should reset he timer.

....if not have a look at this KB: http://www.symantec.com/docs/TECH182913

SOLUTION
PCressey's picture

Thank you!  I had to run the updatetime.bat file in the Tools directory, as directed by the KB.

SebastianZ's picture

Glad to help. Can you tell us if in your case the server system time was changed at some point manually? - this is would be the direct cause of the issue.