Video Screencast Help
Give us your opinion and win with Symantec! Please help us by taking this survey to tell us about your experience with Symantec Connect, so that we can continue to grow and improve.  Take the survey.

Problems with SEP12.1.2015.2015 (SEP 12.1 RU2)

Created: 12 Feb 2013 | 8 comments

I recently upgraded my SEP implementation from 12.1 RU1 (12.1.1000.157) to 12.1 RU2 (12.1.2015.2015).  In doing so, I noticed a few problems since the upgrade.  I have a Windows Server 2008 R2 running Demote Desktop Services for 16 approx people.  The backup on this Server is Acronis Backup & Recovery 11.  The backup uses VSS to take snapshots during the backup.  The Application Log reports an Event ID 513 (Microsoft-Windows-CAPI2) error at the start and end of every backup:

Cryptographic Services failed while processing the OnIdentity() call in the System Writer Object.
AddLegacyDriverFiles: Unable to back up image of binary EraserUtilRebootDrv.
System Error:
The system cannot find the file specified.

The SEP 12.1 RU2 client on the RDS Server had the following installed:
Virus, Spyware, and Basic Download Protection
Advanced Download Protection
Outlook Scanner
Proactive Threat Protection
Network Threat Protection
Intrusion Prevention

When SEP 12.1 RU2 is uninstalled, and SEP 12.1 RU1 is put back, the backup completes without any errors in the logs.

On laptops running Windows 7 and the upgraded SEP 12.1 RU2 client, an hour glass is displayed without access to the desktop.  When RU2 in uninstalled and RU1 is put back, the issue is resolved.  Same components on both SEP versions.

Any help would be appreciated.

Comments 8 CommentsJump to latest comment

Brɨan's picture

You're probably going to need to end up calling Symantec to resolve this.

Did you exclude the necessary directories for this?

I would start with only the AV component to see what the result is when doing the back up. Seems as if a driver change was made in the newest release for one of the components and that is what is causing this.

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

James-x's picture

I agree with Brian81. You're probably going to be best served by opening up a support ticket.


The Symantec Endpoint Protection Knowledgebase

Please remember to mark the post which resolved your issue as the solution!

dwaugh's picture

Thanks for the replies.  I have opened a support ticket, though I have not been pleased.  I uninstalled SEP 12.1 RU2 on the Server, and re-installed it with the Virus, Spyware, and Basic Download Protection.  The error was still present.  Presently the older version is on the Server. 

To which directories are you referring?

Brɨan's picture

For your backup software.

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

widdoh's picture

Was this issue ever resolved? I am facing the exact problem.

Thank you

SameerU's picture


What are the components installed on SEP client


widdoh's picture


Virus and Spyware

Proactive Threat Protection

Network Threat Protection

P.s. I disabled all the above but the problem remains. Only an uninstall resolved it!


SameerU's picture


Can you install only the core components and check