Endpoint Protection

hi guyz i have installed the SEPM on the XP machine and now i am trying to deploy the clients but the problem is it is not working. when i tried to logon into the SEPM console it wont let me in.

i have checked the services and found that symantec endpoint protection manager services has stopped. i tried to start it but it wont start . it gives message "the SEPM services started and stop ....."

any ideas guyz? please help me

You might get better response if you post to the correct forum.

Community: Security -> Forums -> Endpoint Protection (AntiVirus)

Have moved this for you. Sorry I can't help though -I don't use SEP!

hi thanks though for taking me to the right path. actually i am a newbe here.

Hi,

Check this thread.

http://www.symantec.com/connect/forums/symantec-endpoint-protection-manager-install-xp

Follow this article:

http://www.symantec.com/business/support/index?page=content&id=TECH96262&actp=search&viewlocale=en_US&searchid=1299594376082

hi i have checked it. in IIS it has created the symantec website on the port 8014.

Hi,

Attach scm-server-0.log , path would be: <Directory>\Program Files\Symantec\Symantec Endpoint Protection Manager\tomcat\logs

here is the log

2011-05-02 09:14:17.812 SEVERE: ================== Server Environment ===================
2011-05-02 09:14:17.953 SEVERE: os.name = Windows XP
2011-05-02 09:14:17.953 SEVERE: os.version = 5.1
2011-05-02 09:14:17.953 SEVERE: os.arch = x86
2011-05-02 09:14:17.953 SEVERE: java.version = 1.6.0_14
2011-05-02 09:14:17.953 SEVERE: java.vendor = Sun Microsystems Inc.
2011-05-02 09:14:17.953 SEVERE: java.vm.name = Java HotSpot(TM) Client VM
2011-05-02 09:14:17.953 SEVERE: java.vm.version = 14.0-b16
2011-05-02 09:14:17.953 SEVERE: java.home = C:\Program Files\Symantec\Symantec Endpoint Protection Manager\jdk\jre
2011-05-02 09:14:17.953 SEVERE: catalina.home = C:\Program Files\Symantec\Symantec Endpoint Protection Manager\Tools\..\tomcat
2011-05-02 09:14:18.015 SEVERE: java.user = null
2011-05-02 09:14:18.109 SEVERE: user.language = en
2011-05-02 09:14:18.218 SEVERE: user.country = US
2011-05-02 09:14:18.328 SEVERE: scm.server.version = 11.0.6100.645
2011-05-02 09:14:22.234 INFO: Server side cache PERCETAGE_OF_TOTAL_MEMORY=0.3  PERCETAGE_OF_MEMORY_TO_REMOVE=0.2
 

Hi,

It's not informative , please attach entire log.

but its all there is...

by the way i m also sending u the the errors it create when i start the service or when i start the SEPM console

Attachment(s)

need help.zip   159 KB 1 version

one thing more i have checked the event log and it is creating 3 errors

event id 4096,4097,4098

Is the database service running?

If you are running the embemded database (default) the service is called Symantec Embemded Database.

its a little bit beginers question but how can i check it ??? means about the database???

Hi,

Repair the install of the Symantec Endpoint Protection Manager in Add or Remove Programs

1. Open the Control Panel
2. Open Add or Remove Programs
3. Highlight Symantec Endpoint Protection Manager and click the Change button
4. Click Next
5. Select Repair
6. Click Next
7. Click Install
8. Click Finish

Even after that if service stopped attach catalina.out file. Path : <Directory>\Program Files\Symantec\Symantec Endpoint Protection Manager\tomcat\logs

Make sure no other application is using the ports you setup to be used by SEPM.

Hi,

Go Start - Run - type services.msc

Look if you can find a service called Symantec Embemded Database, if yes you are using the embemded database if not you might be using SQL.

how can i make sure that its not being used by the other applications?

in the IIS the symantec website is using 8014 port

i have done it now it is aking me to re configure the managment server or install an aditional site... what shal i do? as i am using XP is it ok if i use SQL data base instead of  embemded database?

Start - Run - type cmd - hit ok

navigate to c:\

Type

netstat -anob > connections.txt

That should create the file connections.txt under c:\

Check the file to see if any other application is using the port 8014.

Hi,

Select first opetion, configure the management server.

If you have already installed SEPM then you have to be confident which database you are using.

nothing is using that port.

by the way shall i use embedded database or SQL?

well last time i installed the embedded database but now i have seen that it is upto 5000 user clients and XP only support 10. so wat is ur suggesstion ?

Hi,

Let me know how many clients do you have in your network ?

XP supports 10 concurrent session. but it can support both the database i.e Embedded and SQL.

Every database has it's own limitation to support number of clients.

Embedded support up to 5000 clients while SQL support  5000+.

its basically an experimental scenario.

Hi,

Ok, you had installed Embeeded database last time then continue with same.

done it but still cant logon and and also service is not starting

Hi,

Attach catalina.out file. Path : <Directory>\Program Files\Symantec\Symantec Endpoint Protection Manager\tomcat\logs

How to check services are running or not on XP machines.

Go to Start --> Run --> (type)Services.msc

Check Symantec embeeded database and Symantec end point protection services are running or not .

Try to restart as well.

Check in the task manager if you see any processes like dbsrv9.exe, If you do then kill the same and then try to start the Embedded database services.

the service is still not running but the  Symantec embeeded database  is running

there was no catalina.out file found in the folder

the process dbsrv9.exe is running in the task manager. i killed it but it starts again.

dbsrv9.exe is database service. It should be running for SEPM to function.

ok it is running but i still cannot start the SEPM service in the services.msc and i cannot logon SEPM consol

enable the logging to finest

Add the line "scm.log.loglevel=finest" (no quotes) to the bottom of the following file:

C:\Program Files\Symantec\Symantec Endpoint Protection Manager\tomcat\etc\conf.properties

Save the file and close

Try attempting to start service and if it stops pass on the scm-server-0.log.

i have enabled it as you said but nothing is happening

pass on the scm-server-0.log. does this has more entries or same one as uploaded earlier?

well there is no scm-server-0.log file in the folder now

Find a file called scm-server-0.log or scm-server-1.log, upload any of them or both if you find them.

i cant find anyof them now... hmmm does this happen? shal i reinstall it after formating my PC?

Are the SEPM folders/directories still present? It should be there under c:\Program Files\Symantec\Symantec Endpoint Protection Manager\tomcat\logs\

Hi,

Delete all Symantec folders and try to reinstall SEPM.

If SEP client is installed on that machine then you can't delete all Symantec folders.

yes they are there but not the log file scm-server-0

i am now alos thinking to do it.

please guyz need help :(

is symantec endpoint installed on default website or custom website? there can be only one website be installed on XP, what is the port u have installed it on? 8014?

did you try to reinstall? wasn't that successfull?

can you search the drives for the scm-server-0.log?

brother i have installed it on custom website. yes its on port 8014

yes i have reinstalled it but it was no use... i wasnt able to login

can you search the drives for the scm-server-0.log and pass it on?

does the SEPM services shows down?

it was hell of an effort but due to your support and lots of help i have finally loged in. :) and the client package has been deployed also ... i dont know how i did it. i just reinstall  IIS stop the service and then reinstalled LU and SEPM and after that it started by it self 

thanks alot brothers for your time and help :)

So happy that was able to  help you :), this was running from long time....all is well now, Have a wonderful day :)

thanks a lot brother yes you have spent a lot of time on just figuring out was the problem and i am really thankfull to you that you helped me alot :)

hope to see you again :)