SEPM 11.0 u5 Not Accesible
Hello all.
I know that this topic (or similar like this one) have been discussed to death - really! I think I read every one. But now I have the problem that other had, and I can not get around it. So I am turning to you all to help me out...please.
I have been trying to install SEP at a firm, it superseded the Symantec Anti-virus. So I got it all, I installed it, it tuns out fine. I can add clients, I can see them, I can update them - the app works as it should. Then, I move on to install Backup Exec on the same server - I have not see any document, that would forbid that. After installing BE, the SEPM dies - I am unable to start it OR fix it. I have literately tried every possible solution that I could find - on these forums and via web search. I have tried service1.symantec.com/SUPPORT/ent-security.nsf/2326c6a13572aeb788257363002b62aa/86368136366e1ad78025734e004734d9 solution provided by searching trough KB, I have tried to change db access password - now does not contain any special char, I have checked if IIS is running in 64 bit mod after install - it is, the database server is responding OK, I have tried to made connection to the database server manually - it works, I granted user the full control over the SEMP directory, I have cleared SSL state in the default IIS site settings, I have changed the binding IP to the site to all available, I disabled all firewalls and antivirus software,..... and I think that I cover all solutions prodived by just about anyone. I still can not get SEMP service to run. I hope, that someone can guide me to the correct answer/solution - I am getting pretty desperate and "window-jump-out-mood" here :S
The operating system running SEM is Windows 2008 x64 ENT, IIS7, ASP.NET 3.5.1, all required extensions (CGI) are installed, system is fully updated, including SP2. The SEP is version 11.0 u5, as suggested to support Windows 2008 and Windows 7. The sep5 database is on another server, dedicated, running SQL Server 2008.
I am also attaching my server logs - tomcat's for clue/error hunt....
ANY help or hint is greatly appreciated... help... meow?
Thanks in advance, DarkMaster
Comments 21 Comments • Jump to latest comment
Backup exec uses port 8443
Change this port in SEPM to 8444 or something else check the document below on how to change it
http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007111308424148
Vikram Kumar
Symantec Consultant
The most helpful part of entire Symantec connect is the Search button..do use it.
Hello Mr. Kumar,
from the start install, I have not selected the default port - it is 8844, so it is not in the direct conflict with that specific port you mentioned(8443) - I know of it and I know that brings conflict situations. So I have not used it at all...
MAJESTIC-12 | Information. Technology. Control.
its showing error ErrorCode: 0x10010000
run the repair of sepm and then the management server configuration wizard, check if your default app pool is started in IIS.
IIS reset or Reboot of the server, usually fixes the issue. Give it a try.
"Failed to connect to server" message during login and the scm-server-0.log file shows '401 Unauthorized' errors.
http://service1.symantec.com/support/ent-security.nsf/docid/2009073117184848
is your IIS running on IIS 32 or 64 bit
How to switch between the 32-bit versions of ASP.NET 1.1 and the 64-bit version of ASP.NET 2.0 on a 64-bit version of Windows
http://support.microsoft.com/kb/894435
Please don't forget to mark your thread solved with whatever answer helped you : ) Rafeeq
Hello Rafeeq,
I tried all of your suggested sollutions - SEPM is still not starting. Did repair installation, configuration manager, added extra security parameters and rerun IIS in 64bit mode, as I said, still nothing. I am thinking that this is just...bizzare :S
Here are new logs from service start/stop.
MAJESTIC-12 | Information. Technology. Control.
its shows 500
http://support.microsoft.com/kb/311766
Please don't forget to mark your thread solved with whatever answer helped you : ) Rafeeq
Check the ODBC configuration
go to
C:\Windows\SysWOW64\odbcad32.exe
Name: SymantecEndpointSecurityDSN
Description: <Anything>
Server: Servername\InstanceName (Can be blank as it is localized, otherwise specify the default: sem5)
Login ID: dba
Password: <password>
Vikram Kumar
Symantec Consultant
The most helpful part of entire Symantec connect is the Search button..do use it.
Kumar,
I tried to set-up System DNS - with a success. Though there are some differences from your suggested setting from mine. For instance: I have a remote database server, so I entered that address, valid login id was provided at database server so I entered it also along with custom password - that setup works, the DB connection test returned successful connection/test. I can report, that there is no problem at database connection from SEM server end...
MAJESTIC-12 | Information. Technology. Control.
Thats right I missed your SEPM was on SQL..
Well..try repairing SEPM from Add/Remove Programs ( it wouldn't change anything )
Vikram Kumar
Symantec Consultant
The most helpful part of entire Symantec connect is the Search button..do use it.
Kumar,
did that as it was suggested in previous post - no luck either I'm afraid
MAJESTIC-12 | Information. Technology. Control.
Enable logging on reporting and secars in IIS
IIS Manager - Websites- Symantec Web Server -
right click reporting - properties - log visit same with secars
Try loggin into SEPM to generate logs
then go to C:\WINDOWS\system32\Logfiles\W3SVCxx
open the latest logs and what http error you get for reporting or secars.
as your current logs say 500 which means either database or IIS ( 32-to-64 bit conversion ) issue.
However since installing of BE shouldn't change that so it shouldn't be a issue.
Vikram Kumar
Symantec Consultant
The most helpful part of entire Symantec connect is the Search button..do use it.
Kumar,
I tried to modify logging in IIS (it is IIS7) and here are the two responses from loading the root of the Symantec Default Site and requesting secars dir:
Also, I find it interesting that the secars and secreg subdirectories are empty - if I view them in IIS Manager...strange, should there not be some files...for instance I tried to load as suggested in some other forum post:
without any luck - it 404ed. On the other hand, the reporting subdir loads just fine and after I try to login it just says that the server is down...
MAJESTIC-12 | Information. Technology. Control.
Those directory will be blank.
Might be issue with PHP
In this Doc look for "Verify the version of PHP that SEPM is using "
http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2008042212582048
Vikram Kumar
Symantec Consultant
The most helpful part of entire Symantec connect is the Search button..do use it.
For Secars test
http://<SEPM_Server_IP_or_Machine_Name:Port>/secar...
here port is 8014
Vikram Kumar
Symantec Consultant
The most helpful part of entire Symantec connect is the Search button..do use it.
OK now - I checked with the php - the version match, I can run the phpinfo file on the reporting sub-page and all.
I tested the server to serve me secars directory and hello command - all without any luck. The server returned error 500 - which is of course internal server. I read somewhere about this but can not remember about what (SEPM specific)...
MAJESTIC-12 | Information. Technology. Control.
This means IIS is set to 32 bit mode on Windows Server 2003 64 bit operating system when installing Symantec Endpoint Protection Manager.
Java -1 Errors and HTTP 500 errors when connecting to the Symantec Endpoint Protection Manager on a Windows Server 2003 64 bit
http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/387a93f58eb98c39882573ed007b50f3?OpenDocument
Vikram Kumar
Symantec Consultant
The most helpful part of entire Symantec connect is the Search button..do use it.
OK this is starting to get annoying - I checked that document, I ran the Enable32bitAppOnWin64 0 and aspnet_regiis.exe -i commands, after that IISRESET - still no luck, still internal server error - I really appreciate your help Kumar (and all others that have joined in) - but I am beginning to think if I should move SEP to another server altogether :S
MAJESTIC-12 | Information. Technology. Control.
Well..Why don't you try this..
Un-install IIS...Reboot the server Re-install ...Repair SEPM.
That will take IIS to the place where it was and it won't affect SEPM as well..
And even if that doesn't woth then you can try re-install SEPM.
Vikram Kumar
Symantec Consultant
The most helpful part of entire Symantec connect is the Search button..do use it.
I did all of the mentioned above - nothing works, still getting -1 error. Also tried to uninstall SEPM, it could not start IISADMIN due to insufficient permission (???), after that I found some interesting approach on installing SEPM here: http://trycatch.be/blogs/pdtit/archive/2009/04/26/issues-when-running-symantec-endpoint-protection-and-symantec-backup-exec-on-the-same-machine-and-how-to-solve-the-issues.aspx, it had a lot of potential - I think that I even managed to get it running, but after iisreset, I think I lost it. After that I caught myself in some weird and I think permanent magic circle of database owner/modifier - so now I can not even successfully finish reconfiguration of the primary SEPM....
Shame, I was SOOO looking forward to this :S
I will try to deal out to install SEPM on other server, probably on Domain Controller - hope, that nothing breaks :S
I really appreciate all your help but I think that I have hit total wall, no way around....just another road I guess...
MAJESTIC-12 | Information. Technology. Control.
Well..Before you try the new server can you run SEP Support Tool
http://www.symantec.com/techsupp/home_homeoffice/products/sep/Sep_SupportTool.exe
Vikram Kumar
Symantec Consultant
The most helpful part of entire Symantec connect is the Search button..do use it.
Kumar,
I ran the utility that you have provided me with - it outputed all those errors/warnings that we were discussing during this thread. I tried to fix the them by one - after that - still no luck.
Then I got upset...so I uninstalled Manager, and reinstalled it - interestingly enough, it did not mention any security problem like it did earlier today (I posted about that). So I restarted the server, ran the setup wizard - and again - I ran into trouble. The wizard could create the user and the database, strangely it could not connect to it. So I went back with the buttons, and selected existing database, and it was good - the configuring went by without problems - services started and - I can log in SEPM again...tough I will have to manually add clients that are already running SEP - I hope, that I will manage :)
Anyhows - I really Really Really appreciate all your help, especially to you Mr. Kumar - you really got out for me. Sorry, that none of the suggested solutions worked (per-sei) - reinstall did the trick though...I hope that we could learn something from this. Thank you again.
I hope to have such high response quality in the future - I am sure I will need it :)
Great and secure weekend to all!
MAJESTIC-12 | Information. Technology. Control.
Its great to hear that everything fell in place at the end..
Vikram Kumar
Symantec Consultant
The most helpful part of entire Symantec connect is the Search button..do use it.
Would you like to reply?
Login or Register to post your comment.