Hi all,

Recently Our SEPM Server can not perform LiveUpdate. LiveUpdate Status shows:

LiveUpdate failed - LiveUpdate encountered one or more errors.

LiveUpdateTask-0.log shows:

THREAD 37 WARNING: LiveUpdateTask>> Fail to perform the prepare tasks for LU run.

THREAD 33580 WARNING: LiveUpdateTask>> Fail to perform the prepare tasks for LU run.

The attachments are detail screenshots.

Anybody facing with this problem before? Thank you all for your suggestion.

Regards,

Nguyen Cao

Have you tried a repair?

Can you also post lue.log?

Hi Brian,

I have tried repair once but no help.

How can I find the lue.log? No such file name in SEPM\tomcat\logs.

Thank you.

Hello,

Which LUA version are you using ?

More detailed information about why LiveUpdate failed can be found in the following log file:

These are found under:

C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Log.LiveUpdate

C:\Documents and Settings\All Users\Application Data\Symantec\Symantec Endpoint Protection\12.1.671.4971.105\Data\Lue\Logs

On Windows Vista, Windows 7, and Windows Server 2008:
C:\Program Data\Symantec\Symantec Endpoint Protection\<silo_id>\Data\Lue\Logs

Where is the location of LiveUpdate Log file Log.liveupdate?

http://www.symantec.com/business/support/index?page=content&id=TECH92881

are you trying to run luall.exe as a Task from your windows?

Hi,

Please refer the below article.

https://www-secure.symantec.com/connect/blogs/liveupdate-administrator-lua-version-232-now-available

https://www-secure.symantec.com/connect/articles/sep-121-top-articles-and-best-practices#comment-8234411

Hi,

Here is something in Log.liveupdate:

////////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////////
// Start LuComServer
////////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////////
4/8/2013, 10:23:50 GMT -> LuComServer version: 3.3.100.15
4/8/2013, 10:23:50 GMT -> LiveUpdate Language: English
4/8/2013, 10:23:50 GMT -> LuComServer Sequence Number: 20120518
4/8/2013, 10:23:50 GMT -> OS: Windows 2008R2 Standard Edition, Service Pack: 0, Major: 6, Minor: 1, Build: 7600 (64-bit)
4/8/2013, 10:23:50 GMT -> System Language:[0x0409], User Language:[0x0409]
4/8/2013, 10:23:50 GMT -> IE8 support.
4/8/2013, 10:23:50 GMT -> ComCtl32 version: 6.16
4/8/2013, 10:23:50 GMT -> IP Addresses: ::1, 172.24.48.17
4/8/2013, 10:23:50 GMT -> Loading C:\ProgramData\Symantec\LiveUpdate\Product.Inventory.LiveUpdate
4/8/2013, 10:23:50 GMT -> Opened the product inventory at "C:\ProgramData\Symantec\LiveUpdate\Product.Inventory.LiveUpdate".
4/8/2013, 10:23:50 GMT -> Account launching LiveUpdate is not a logged in user's account
4/8/2013, 10:23:50 GMT -> Combined Product Inventory Flags 0, Permanent Flags 0, Permanent Flags Filter 0
4/8/2013, 10:23:50 GMT -> LiveUpdate flag value for this run is 0
4/8/2013, 10:23:50 GMT -> ProductRegCom/luProductReg(PID=1736/TID=1460): Successfully created an instance of an luProductReg object!
4/8/2013, 10:23:50 GMT -> ProductRegCom/luProductReg(PID=1736/TID=1460): Path for calling process executable is F:\SEPM 12 Data Folder\bin\LuCatalog.exe.
4/8/2013, 10:23:50 GMT -> ProductRegCom/luGroup(PID=1736/TID=1460): Successfully created an instance of an luGroup object!
4/8/2013, 10:23:50 GMT -> ProductRegCom/luGroup(PID=1736/TID=1460): Path for calling process executable is F:\SEPM 12 Data Folder\bin\LuCatalog.exe.
4/8/2013, 10:23:50 GMT -> ProductRegCom/luProductReg(PID=1736/TID=1460): Destroyed luProductReg object.
4/8/2013, 10:23:50 GMT -> ProductRegCom/luGroup(PID=1736/TID=1460): Destroyed luGroup object.
////////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////////
// End LuComServer
////////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////////

Hello,

LU1825: LiveUpdate could not understand how to install this update.  You may need to get the latest version of LiveUpdate before you can install this update.
Installing SEPM Iron Settings 12.1 RU2 (1 of 1), failed.
LU1825: LiveUpdate could not understand how to install this update.  You may need to get the latest version of LiveUpdate before you can install this update.

Installation failed, error summary...
LU1806: LiveUpdate downloaded all of the updates you requested, but all of them failed to install.  Please try to get the updates at a later time.

Which LUA version are you using ?

try to upgrade your lua version

https://www-secure.symantec.com/connect/blogs/liveupdate-administrator-lua-version-232-now-available

Thanks Manish,

I have just created a technical support case to get latest LUA and also try to find out the root cause. Anything new will be posted here.

Hi Rafeeq,

This is the result after running luall.exe. Seems nothing changed.

The following Symantec products and components are installed on your computer.
> LiveUpdate
> SEPM Behavior And Security Heuristics 12.1 RU2
> SEPM CIDS Signatures 12.1 RU2
> SEPM Content Catalog
> SEPM Extended File Attributes and Signatures 12.1 RU2
> SEPM Iron Revocation List 12.1 RU2
> SEPM Iron Settings 12.1 RU2
> SEPM Iron Whitelist 12.1 RU2
> SEPM SRTSP Settings
> SEPM Submission Control Data
> SEPM Virus Definitions Win32 12.1 RU2 H
> SEPM Virus Definitions Win64 (x64) 12.1 RU2 H
> SESM AntiVirus Client Win32
> SESM AntiVirus Client Win64
> SESM IPS Signatures Win32
> SESM IPS Signatures Win64
> SESM SEP PTS Content
> SESM SEP PTS Engine Win32
> SESM SEP PTS Engine Win64
> SESM Submission Control Data
> SESM Symantec Known Application System
> SESM Symantec Security Content A1
> SESM Symantec Security Content A1-64
> SESM Symantec Security Content B1
> SESM Symantec Security Content B1-64
> SPC AntiVirus Client Mac

Initializing...
Connecting to liveupdate.symantecliveupdate.com...
Connecting to liveupdate.symantec.com...
Connecting to update.symantec.com...
...
Downloading catalog file (6 of 37), complete.
...
Downloading catalog file (37 of 37), complete.
...

The following updates have been found:
> SEPM Virus Definitions Win32 12.1 RU2 H,  3105.9 KB
> SEPM Virus Definitions Win64 (x64) 12.1 RU2 H,  3102.0 KB
> SEPM Behavior And Security Heuristics 12.1 RU2,  1345.0 KB
> SESM Symantec Security Content A1,  12402.5 KB
> SESM Symantec Security Content A1-64,  12402.6 KB
> SESM Symantec Security Content B1,  74.7 KB
> SESM Symantec Security Content B1-64,  74.7 KB
> SESM IPS Signatures Win32,  1232.3 KB
> SESM IPS Signatures Win64,  1253.2 KB
> SEPM CIDS Signatures 12.1 RU2,  1479.8 KB
> SEPM Iron Whitelist 12.1 RU2,  10.2 KB
> SEPM Iron Revocation List 12.1 RU2,  7.1 KB
> SEPM Iron Settings 12.1 RU2,  7.6 KB
Total Download 36497.3 KB

The following updates have been aborted:
> SEPM Content Catalog has 1 aborted update(s).
Reason:
LU1845: This product was not updated due to a processing error.

> SESM AntiVirus Client Win32 has 1 aborted update(s).
Reason:
LU1875: This update failed during its preprocessing welcome text phase

> SESM AntiVirus Client Win64 has 1 aborted update(s).
Reason:
LU1875: This update failed during its preprocessing welcome text phase

> SPC AntiVirus Client Mac has 1 aborted update(s).
Reason:
LU1875: This update failed during its preprocessing welcome text phase

Downloading SEPM Virus Definitions Win32 12.1 RU2 H (1 of 1), complete.
Downloading SEPM Virus Definitions Win64 (x64) 12.1 RU2 H (1 of 1), complete.
Downloading SEPM Behavior And Security Heuristics 12.1 RU2 (1 of 1), complete.
Downloading SESM Symantec Security Content A1 (1 of 2), complete.
Downloading SESM Symantec Security Content A1 (2 of 2), complete.
Downloading SESM Symantec Security Content A1-64 (1 of 2), complete.
Downloading SESM Symantec Security Content A1-64 (2 of 2), complete.
Downloading SESM Symantec Security Content B1 (1 of 2), complete.
Downloading SESM Symantec Security Content B1 (2 of 2), complete.
Downloading SESM Symantec Security Content B1-64 (1 of 2), complete.
Downloading SESM Symantec Security Content B1-64 (2 of 2), complete.
Downloading SESM IPS Signatures Win32 (1 of 1), complete.
Downloading SESM IPS Signatures Win64 (1 of 1), complete.
Downloading SEPM CIDS Signatures 12.1 RU2 (1 of 1), complete.
Downloading SEPM Iron Whitelist 12.1 RU2 (1 of 1), complete.
Downloading SEPM Iron Revocation List 12.1 RU2 (1 of 1), complete.
Downloading SEPM Iron Settings 12.1 RU2 (1 of 1), complete.

Installing SEPM Virus Definitions Win32 12.1 RU2 H (1 of 1), failed.
LU1825: LiveUpdate could not understand how to install this update.  You may need to get the latest version of LiveUpdate before you can install this update.
Installing SEPM Virus Definitions Win64 (x64) 12.1 RU2 H (1 of 1), failed.
LU1825: LiveUpdate could not understand how to install this update.  You may need to get the latest version of LiveUpdate before you can install this update.
Installing SEPM Behavior And Security Heuristics 12.1 RU2 (1 of 1), failed.
LU1825: LiveUpdate could not understand how to install this update.  You may need to get the latest version of LiveUpdate before you can install this update.
Installing SESM Symantec Security Content A1 (1 of 2), failed.
LU1825: LiveUpdate could not understand how to install this update.  You may need to get the latest version of LiveUpdate before you can install this update.
Installing SESM Symantec Security Content A1 (2 of 2), failed.
LU1825: LiveUpdate could not understand how to install this update.  You may need to get the latest version of LiveUpdate before you can install this update.
Installing SESM Symantec Security Content A1-64 (1 of 2), failed.
LU1825: LiveUpdate could not understand how to install this update.  You may need to get the latest version of LiveUpdate before you can install this update.
Installing SESM Symantec Security Content A1-64 (2 of 2), failed.
LU1825: LiveUpdate could not understand how to install this update.  You may need to get the latest version of LiveUpdate before you can install this update.
Installing SESM Symantec Security Content B1 (1 of 2), failed.
LU1825: LiveUpdate could not understand how to install this update.  You may need to get the latest version of LiveUpdate before you can install this update.
Installing SESM Symantec Security Content B1 (2 of 2), failed.
LU1825: LiveUpdate could not understand how to install this update.  You may need to get the latest version of LiveUpdate before you can install this update.
Installing SESM Symantec Security Content B1-64 (1 of 2), failed.
LU1825: LiveUpdate could not understand how to install this update.  You may need to get the latest version of LiveUpdate before you can install this update.
Installing SESM Symantec Security Content B1-64 (2 of 2), failed.
LU1825: LiveUpdate could not understand how to install this update.  You may need to get the latest version of LiveUpdate before you can install this update.
Installing SESM IPS Signatures Win32 (1 of 1), failed.
LU1825: LiveUpdate could not understand how to install this update.  You may need to get the latest version of LiveUpdate before you can install this update.
Installing SESM IPS Signatures Win64 (1 of 1), failed.
LU1825: LiveUpdate could not understand how to install this update.  You may need to get the latest version of LiveUpdate before you can install this update.
Installing SEPM CIDS Signatures 12.1 RU2 (1 of 1), failed.
LU1825: LiveUpdate could not understand how to install this update.  You may need to get the latest version of LiveUpdate before you can install this update.
Installing SEPM Iron Whitelist 12.1 RU2 (1 of 1), failed.
LU1825: LiveUpdate could not understand how to install this update.  You may need to get the latest version of LiveUpdate before you can install this update.
Installing SEPM Iron Revocation List 12.1 RU2 (1 of 1), failed.
LU1825: LiveUpdate could not understand how to install this update.  You may need to get the latest version of LiveUpdate before you can install this update.
Installing SEPM Iron Settings 12.1 RU2 (1 of 1), failed.
LU1825: LiveUpdate could not understand how to install this update.  You may need to get the latest version of LiveUpdate before you can install this update.

Installation failed, error summary...
LU1806: LiveUpdate downloaded all of the updates you requested, but all of them failed to install.  Please try to get the updates at a later time.

LiveUpdate session is complete.

Hi all, here is what I exactly do to solve the problem with Symantec support:

1. Repair the SEPM with the original install file in SEPM folder (extract the Part1_Installation file and go to SEPM folder). First run LUSETUP.EXE and then run Symantec Endpoint Protection Manager.msi. After the repair finish just select reconfigure SEPM and use the default parameter.

2. Go to Control Panel --> Open Symantec LiveUpdate (32 bits) Config --> Change the LU to Interactive mode.

3. Run luall.exe once again.

Now LiveUpdate can run properly.

Thank you all for valuable answer!

Regards,

Nguyen Cao

I don't seen any SEP11 virus definitino listed here. Does that mean tha SEP11 virus definition will not be udpated ?

Regards