Hi,

Good day! We're having an issue on installation of SEP 12.1 RU4 MP1a. We ran the installer on workstation that has SEP 11 version. After installation, we checked the status of the workstation on the SEPM. Upon checking, it says that the installation was rolled back. With this, we raised a symantec support case. As advised by symantec support, we need to update the root certificate of the machine affected by rolled back. We follow the recommendation of symantec support and it work on the other workstation. However, there were still workstation that keep on rolling back issue. Please help! Thanks.

See this articles

Certificate error occurs when attempting to install or upgrade Symantec Endpoint Protection

Symantec Endpoint Protection 12.1 RU4 installation or migration on Windows fails due to outdated root certificate

Hi James,

We're actually done on this, but still installation status was rolled back. Thanks for the article.

Hi,

In addition, the workstation that we upgraded was having Windows XP. Thanks.

Please provide OS version ?

Also Share SEP_inst.log and sis_inst.log

Hi Sumit,

I will post it once I get the copy of the logs. Thanks.
 

have you upgrade Windows XP Root Certificates ? How many system having problem ?

http://www.microsoft.com/en-us/download/details.aspx?id=39802

--Edit Word--

Post the sep_inst.log

Hi James,

Yes, we're done upgrading root certificates. More that 100 clients experiencing roll back issue on SEP 12.1 RU4 MP1a. Thanks.

Latest is SEPM 12.1 RU4 MP1a in related only SEPM not SEP client.

http://www.symantec.com/business/support/index?page=content&id=TECH154475

You can try to install 12.1.4100.4126 (RU4 MP1)

Need to see the relevant logs to find out what's going on:

What logs do I need to gather in order to troubleshoot a failed SEP 12.1 client installation?

Hi,

We encounterred again rollback while upgrading. See attached SEP_INST log. Thanks.

(changed the file name extension, from .doc to .log to view the data inside)

Attachment(s)

SEP_INST_8.doc   1.80 MB 1 version

What SEP exact version you have try to install ?

as per log it's say 12.1.2015.2015.105

Yes as per log it is the installation of 12.1.2. No error in it.

Hi James,

We're trying to install SEP 12.1.4100.4126. I will get new log, apologize for the wrong log. Thanks.

kintachi,

SEP 12.1 RU4 MP1a is the current version of the SEPM only, the latest SEP Agent is still RU4 MP1.

With it, now requires some VeriSign certificates to be installed as 'Computer Account', otherwise the install of this SEP Agent rolls back. See these KB article for precise steps you must follow before deploying SEP RU4 MP1 Agents. No idea why the Symanetc release notes never made this pre-requisite clear, it cost us a LOT of wasted man hours across dozens of customer accounts.

http://www.symantec.com/business/support/index?page=content&id=TECH218029

Also, to get a good, detailed install log (if the above doesn't fix it for you), you need to install using the MSI itself with /levx to get a more debug output.
e.g. msiexec /i Sep.msi /levx debug_ouput_SEP_install_log.txt