Video Screencast Help
Search Video Help Close Back
to help
New in the Rewards Catalog: Vouchers for "Symantec Technical Specialist" and "Symantec Certified Specialist" exams.

SEPM 11.0.5 Installation Problem

Updated: 18 Aug 2010 | 28 comments
R-D's picture
0 0 Votes
Login to vote

I am trying to upgrade a previous installation of SEP to the newest 11.0.5 in order to create a deployment package to support WIndows 7 clients.

The installer seemed to be hung at "Validating Install", I opened the SEPM_INST.LOG and found the following;

<pre>MSI (s) (A4:CC) [11:49:18:843]: Note: 1: 2262 2: Extension 3: -2147287038
MSI (s) (A4:CC) [11:49:18:859]: Note: 1: 2262 2: Extension 3: -2147287038
MSI (s) (A4:CC) [11:49:18:859]: Note: 1: 2262 2: Extension 3: -2147287038
MSI (s) (A4:CC) [11:49:18:859]: Note: 1: 2262 2: Extension 3: -2147287038
MSI (s) (A4:CC) [11:49:18:890]: PROPERTY CHANGE: Modifying CostingComplete property. Its current value is '0'. Its new value: '1'.
MSI (s) (A4:CC) [11:49:18:890]: Note: 1: 2205 2:  3: BindImage
MSI (s) (A4:CC) [11:49:18:890]: Note: 1: 2205 2:  3: PublishComponent
MSI (s) (A4:CC) [11:49:18:890]: Note: 1: 2205 2:  3: SelfReg
MSI (s) (A4:CC) [11:49:18:890]: Note: 1: 2262 2: Extension 3: -2147287038
MSI (s) (A4:CC) [11:49:18:937]: Note: 1: 2727 2: 

tion 12:03:15: CancelSetup. Dialog created
Action 12:06:31: CancelSetup. Dialog created
MSI (c) (9C:98) [12:08:13:156]: Note: 1: 2262 2: Extension 3: -2147287038
MSI (c) (9C:98) [12:08:13:156]: Note: 1: 2262 2: Extension 3: -2147287038
MSI (c) (9C:98) [12:08:13:156]: Note: 1: 2262 2: Extension 3: -2147287038
MSI (c) (9C:98) [12:08:13:156]: Note: 1: 2262 2: Extension 3: -2147287038
MSI (c) (9C:98) [12:08:13:156]: Note: 1: 2262 2: Extension 3: -2147287038
MSI (c) (9C:98) [12:08:13:156]: Note: 1: 2262 2: Extension 3: -2147287038
</pre>

The last entry with the timestamp 11:49:18:937 appears to be where it froze. At 12:03:15 I pressed Cancel to see if it was responsive and then aborted that. I then pressed Cancel again at 12:06:31 and cancelled the installation. It is still hung at the same "Validating Install" message and continues to fill the log with the same message repeatedly.

I am running the setup as a domain admin and the server is in installation mode (Windows Server 2003 R2 Standard).

Thanks.

Comments

AravindKM's picture
29
Oct
2009
1 Vote -1
Login to vote

Remove the older version

Remove the older version first and try to install. See wheter it is working

Please don't forget to mark your thread solved with whatever answer helped you : ) Thanks & Regards Aravind

Gersh's picture
06
Nov
2009
0 Votes 0
Login to vote

Install the Live update First..............

Hi

As the upgrade hungs at "Validating Install",
> Open the  CD or the CD1 folder > Open the SEPM folder > Run (Install)LUsetup,exe first and then Run the Setup.exe from the same folder

Please don't forget to mark your thread solved with whatever answer helped you :)
Cheers
Gersh

R-D's picture
29
Oct
2009
0 Votes 0
Login to vote

Uninstalling is not an option

Uninstalling is not an option yet as I would rather not have to re-attach dozens of existing clients to the new Manager if at all possible.

Thanks.

Sandeep Cheema's picture
29
Oct
2009
1 Vote -1
Login to vote

Just to confirm. You did

Just to confirm. You did extract the binaries. Right?

De facto when AV does something, it starts jumping up and down, waving its arms, and shouting "Hey!  I found a virus!  Look at me!  I'm soooo goooood!"

R-D's picture
30
Oct
2009
2 Votes 0
Login to vote

Not sure what you're asking,

Not sure what you're asking, extract what binaries?

Sandeep Cheema's picture
30
Oct
2009
2 Votes 0
Login to vote

Uncompress the CD before 

Uncompress the CD before  install.

De facto when AV does something, it starts jumping up and down, waving its arms, and shouting "Hey!  I found a virus!  Look at me!  I'm soooo goooood!"

AravindKM's picture
29
Oct
2009
2 Votes -2
Login to vote

I give that option just for

I give that option just for testig purpose in one pc not as a solution

Any way if allthe pcs are connected to sepm the best way to upgrade is assaing pakages to those groups

Below doc can help you in this

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2009090313483348

 

 

Please don't forget to mark your thread solved with whatever answer helped you : ) Thanks & Regards Aravind

R-D's picture
30
Oct
2009
0 Votes 0
Login to vote

As I stated, I am trying to

As I stated, I am trying to upgrade SEP Management console on the server, not the SEP client.

Dan Farrar's picture
30
Oct
2009
1 Vote +1
Login to vote

Migrating to Symantec Endpoint Protection 11.0 RU5

Here is a link that to a KB that may be useful.

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2009090313483348?Open&docid=2009060810031348&nsf=ent-security.nsf&view=docid

Dan Farrar's picture
30
Oct
2009
1 Vote +1
Login to vote

Stop the Symantec Endpoint Protection Manager service

Remember to stop the SEMSRV service and Replication.

Tormod's picture
04
Nov
2009
2 Votes -2
Login to vote

What if I upgraded from

What if I upgraded from 11.0.4 to 11.0.5 without stopping the service? :(
I get problems when i try logging on SEPMC.

"Upgrade server, then try log on to the console".

I have no way to rollback. I have backup of the database, sould i try uninstall, reinsall 11.0.4, restore from database, stop SEPM Service and upgrade again?

Sandeep Cheema's picture
04
Nov
2009
2 Votes 0
Login to vote

Repair might

Repair might help

https://www-secure.symantec.com/connect/forums/hel...

De facto when AV does something, it starts jumping up and down, waving its arms, and shouting "Hey!  I found a virus!  Look at me!  I'm soooo goooood!"

Dan Farrar's picture
05
Nov
2009
0 Votes 0
Login to vote

There is a chance the

There is a chance the database may have been corrupted if an upgrade was attempted while the service and replication was running. I agree that a database repair may work for you. If not, its possible you may have to perform a complete recovery from the last database backup. I wish I had more advise to share.

Tormod's picture
05
Nov
2009
3 Votes -1
Login to vote

that is pretty dumb.... the

that is pretty dumb.... the installation SHOULD do that for me, or at last inform me about it.
i've never heard of an upgrade of any other program that corrupt the database just like that.. no error under installation or anything..

just:
"succesfully installed"
"and successfully corrupted you database, i hope you run on VMware and have a snapshot of that :-)"

and i didnt :(....

Sandeep Cheema's picture
05
Nov
2009
2 Votes 0
Login to vote

did the repair help?

did the repair help?

De facto when AV does something, it starts jumping up and down, waving its arms, and shouting "Hey!  I found a virus!  Look at me!  I'm soooo goooood!"

Tormod's picture
05
Nov
2009
3 Votes -1
Login to vote

No, but i got it working

No, but i got it working :-)

The problem was windows file blocker.. That function that block files from "auto run" when it has been downloaded from internet.
LUSETUP.exe couldnt run at the end of the installation. No error messages either..

But after 14 hours of trying i made it work with my force.... Just unblock every file in the SEP(M) folder and things started happen after the installation was finnished ;-)

R-D's picture
06
Nov
2009
0 Votes 0
Login to vote

First off, let me thank you

First off, let me thank you (Tormod) for hijacking my thread and secondly for you (Sandeep Cheema) for marking it as solved with a solution irrelevant to my original problem.

I have had opportunity to attempt this upgrade again, I have disabled the system service (missed this step last time) and the installation seems to hang at the same place during the install. The SEPM log however now gives me more to work with:

MSI (s) (A4:A4) [10:15:29:984]: Source for file 'secars.dll' is compressed
InstallFiles: File: secars.dll,  Directory: C:\Program Files\Symantec\Symantec Endpoint Protection Manager\bin\,  Size: 750960
MSI (s) (A4:A4) [10:15:30:000]: Re-applying security from existing file.
Info 1603.The file C:\Program Files\Symantec\Symantec Endpoint Protection Manager\bin\secars.dll is being held in use.  Close that application and retry.

Is there anything else that needs to be disabled other than the SEPM service that would cause this file to be locked?

Sandeep Cheema's picture
06
Nov
2009
1 Vote -1
Login to vote

Yes....As you never replied

Yes....As you never replied to it.....Is the CD uncompressed.....?

De facto when AV does something, it starts jumping up and down, waving its arms, and shouting "Hey!  I found a virus!  Look at me!  I'm soooo goooood!"

R-D's picture
06
Nov
2009
1 Vote +1
Login to vote

I don't believe you are

I don't believe you are asking the question you think you are asking. This is the reason your previous comment went unanswered

"Is the CD uncompressed" - There is no "CD" nor is it "compressed" beyond the default level of MSI compression Symantec used when building the installation package. If on the other hand what you are asking is "Have you extracted the contents of the downloaded zip archive" then the answer is yes.

Sandeep Cheema's picture
06
Nov
2009
2 Votes 0
Login to vote

Relax...It's called a

Relax...It's called a CD.....Since ages.....You download the CD.....and binaries are what you get inside(without source code....)....Anyway....What's your point ? Do you want the solution to be cleared? Is that what you are trying to say?

De facto when AV does something, it starts jumping up and down, waving its arms, and shouting "Hey!  I found a virus!  Look at me!  I'm soooo goooood!"

R-D's picture
06
Nov
2009
1 Vote +1
Login to vote

I know some peoples goals on

[Edit]

My intention is to simply get concise, accurate information as to the actual issue not get in an argument with you over the value or lack thereof of your contributions.

Thanks!

chris_delay's picture
06
Nov
2009
2 Votes +2
Login to vote

SQL database or embedded database?

Are you installing to an embedded or SQL database?  I'm seeing this error elsewhere on the internet and it seems to revolve around SQL 2005:

http://support.microsoft.com/kb/933945

I'd recommend, unless that Microsoft document resolves the issue, that you call in for additional troubleshooting with support.  This seems....odd.

Also, and not to speak for someone else, but I believe what Sandeep was trying to ask was if you'd expanded all of the files themselves from the base package.  When downloaded from our FileConnect servers (or from the FTP server), the CD files are zipped up into a single package to download.  I believe he was asking if you'd expanded these files, or if you'd, for example, drag-and-dropped the .msi file out of the compressed package and was trying to run that without the ancillary files.  I think you've exported the files...sorry for the confusion.

R-D's picture
06
Nov
2009
0 Votes 0
Login to vote

SEPM is using an embedded

SEPM is using an embedded database, the server is running SQL Server but that is being used exclusively for another application.

I have gotten beyond the previous error by renaming the "Program Files\Symantec\Symantec Endpoint Protection Manager\bin" folder so that the installer can create a new one, however now I am getting a frozen install at a diffent point:

MSI (s) (A4:C4) [12:47:15:078]: Executing op: ChangeMedia(MediaVolumeLabel=Symantec_Endpoint_Protection_11.,
MediaPrompt=Please insert the disk: 1,MediaCabinet=1\Data1.cab,BytesPerTick=32768,CopierType=1,,,
SignatureRequired=0,,,IsFirstPhysicalMedia=1)
MSI (s) (A4:C4) [12:47:15:078]: Executing op: FileCopy(SourceName=LOGMAX~1.HTM|LogMaxLength.htm,
SourceCabKey=logmaxlength.htm,DestName=LogMaxLength.htm,
Attributes=16385,FileSize=2553,PerTick=32768,,
VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-
1955097274,HashPart2=416224050,HashPart3=-1687283035,HashPart4=-1829337363,,)
MSI (s) (A4:C4) [12:47:15:078]: File: C:\Program Files\Symantec\Symantec Endpoint Protection Manager\data\migration\LogMaxLength.htm;    To be installed;    Won't patch;    No existing file
MSI (s) (A4:C4) [12:47:15:078]: Source for file 'logmaxlength.htm' is compressed
InstallFiles: File: LogMaxLength.htm,  Directory: C:\Program Files\Symantec\Symantec Endpoint Protection Manager\data\migration\,  Size: 2553

This is the end of the log until the installer times out, any suggestions on this one? I don't see a usable error message I can try to do anything with here. I have done this twice and it hangs at the same spot.

I'm really just trying to avoid having to do a reinstall from scratch at this point.

Thanks.

chris_delay's picture
06
Nov
2009
2 Votes +2
Login to vote

A few other things to suggest

These errors do appear to deal with expansion...but I think it's talking about getting files expanded out of, say, .cab files we use...not something you'd have to do anything special with.

A few things to check/change:

1.) Are you physically local when trying to install?  Installing over a remote session has been problematic, and I've seen many, many customer's install issues go away if they're physically local.  If you can't be physically local, are you in a true console session?  Dameware, as an example, fibs and tells you it's console when it really isn't.

2.) If you're using the domain admin account, try creating a local admin account on the machine and logging into that account.  Unless the machine in question is the DC, there isn't any guarantee that the domain admin account has true local admin access.  It should, if set up correctly, but as a general rule, unless we're on the DC, I recommend making a new local administrator account, logging into that account and trying again.

3.) Try installing while logged off the domain (thus away from GPOs) and while logged in as local admin.

4.) Try disabling UAC, then try installing.  I've seen this work in several cases.  If UAC is desired you can turn it back on, but in the case I've worked on, the adminstrator was more than happy to leave UAC off.

5.) Check the permissions on the Program Files folder (or Program Files (x86) if 64 bit)...does the user trying to install have access?  Check also %temp% to see if valid permissions are there too.

Beyond all of that, I'd recommend calling in for assistance so we can help you get to the bottom of this.

Gersh's picture
06
Nov
2009
0 Votes 0
Login to vote

Try to install the Liveupdate first............

Hi,

At the end of the log it shows,
 
MSI (s) (A4:C4) [12:47:15:078]: File: C:\Program Files\Symantec\Symantec Endpoint Protection Manager\data\migration\LogMaxLength.htm;    To be installed;    Won't patch;    No existing file
MSI (s) (A4:C4) [12:47:15:078]: Source for file 'logmaxlength.htm' is compressed
InstallFiles: File: LogMaxLength.htm,  Directory: C:\Program Files\Symantec\Symantec Endpoint Protection Manager\data\migration\,  Size: 2553

Extract the CD1 Folder  > Open the SEPM folder > Run the "LUSETUP.exe" once the Live update is Installed Run the Setup.exe from the same folder

(B) Run the Sep.exe as Admin ( Right click and say run as Admin)

(C)

Please don't forget to mark your thread solved with whatever answer helped you :)
Cheers
Gersh

Tormod's picture
09
Nov
2009
0 Votes 0
Login to vote

You can try unblock the

You can try unblock the files? Like i did when i had the same problems as you.
Right-click, choose properties and click "unblock".

dfinethy's picture
12
Feb
2010
0 Votes 0
Login to vote

Old Thread, Same Problem

I am going to try to do the install while being physically present.  I am not 100% sure that NetSupport is a true console setup.
Sorry for resurrecting an old thread, just trying to provide closure, should I solve this one.

dfinethy's picture
16
Feb
2010
0 Votes 0
Login to vote

Being physically present did

Being physically present did not solve the problem, however I decided to go straight to 11.0.5, and after the update and reconfigure, it is finally working.