Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

SEPM 12.1 LiveUpdate failed

Created: 08 Apr 2013 • Updated: 09 Apr 2013 | 12 comments
This issue has been solved. See solution.

Hi all,

Recently Our SEPM Server can not perform LiveUpdate. LiveUpdate Status shows:

LiveUpdate failed - LiveUpdate encountered one or more errors.

LiveUpdateTask-0.log shows:

THREAD 37 WARNING: LiveUpdateTask>> Fail to perform the prepare tasks for LU run.

THREAD 33580 WARNING: LiveUpdateTask>> Fail to perform the prepare tasks for LU run.

The attachments are detail screenshots.

Anybody facing with this problem before? Thank you all for your suggestion.

Regards,

Nguyen Cao

Operating Systems:

Comments 12 CommentsJump to latest comment

Brɨan's picture

Have you tried a repair?

Can you also post lue.log?

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

Nguyen Cao's picture

Hi Brian,

I have tried repair once but no help.

How can I find the lue.log? No such file name in SEPM\tomcat\logs.

Thank you.

Rafeeq's picture

are you trying to run luall.exe as a Task from your windows?

W007's picture

Hello,

Which LUA version are you using ?

More detailed information about why LiveUpdate failed can be found in the following log file:

These are found under:

C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Log.LiveUpdate

C:\Documents and Settings\All Users\Application Data\Symantec\Symantec Endpoint Protection\12.1.671.4971.105\Data\Lue\Logs

On Windows Vista, Windows 7, and Windows Server 2008:
C:\Program Data\Symantec\Symantec Endpoint Protection\<silo_id>\Data\Lue\Logs

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

Ambesh_444's picture

Hi,

Please refer the below article.

https://www-secure.symantec.com/connect/blogs/liveupdate-administrator-lua-version-232-now-available

https://www-secure.symantec.com/connect/articles/sep-121-top-articles-and-best-practices#comment-8234411

Thank& Regards,

Ambesh

"Your satisfaction is very important to us. If you find above information helpful or it has resolved your issue. Please don't forget to mark the thread as solved."

Nguyen Cao's picture

Hi,

Here is something in Log.liveupdate:

////////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////////
// Start LuComServer
////////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////////
4/8/2013, 10:23:50 GMT -> LuComServer version: 3.3.100.15
4/8/2013, 10:23:50 GMT -> LiveUpdate Language: English
4/8/2013, 10:23:50 GMT -> LuComServer Sequence Number: 20120518
4/8/2013, 10:23:50 GMT -> OS: Windows 2008R2 Standard Edition, Service Pack: 0, Major: 6, Minor: 1, Build: 7600 (64-bit)
4/8/2013, 10:23:50 GMT -> System Language:[0x0409], User Language:[0x0409]
4/8/2013, 10:23:50 GMT -> IE8 support.
4/8/2013, 10:23:50 GMT -> ComCtl32 version: 6.16
4/8/2013, 10:23:50 GMT -> IP Addresses: ::1, 172.24.48.17
4/8/2013, 10:23:50 GMT -> Loading C:\ProgramData\Symantec\LiveUpdate\Product.Inventory.LiveUpdate
4/8/2013, 10:23:50 GMT -> Opened the product inventory at "C:\ProgramData\Symantec\LiveUpdate\Product.Inventory.LiveUpdate".
4/8/2013, 10:23:50 GMT -> Account launching LiveUpdate is not a logged in user's account
4/8/2013, 10:23:50 GMT -> Combined Product Inventory Flags 0, Permanent Flags 0, Permanent Flags Filter 0
4/8/2013, 10:23:50 GMT -> LiveUpdate flag value for this run is 0
4/8/2013, 10:23:50 GMT -> ProductRegCom/luProductReg(PID=1736/TID=1460): Successfully created an instance of an luProductReg object!
4/8/2013, 10:23:50 GMT -> ProductRegCom/luProductReg(PID=1736/TID=1460): Path for calling process executable is F:\SEPM 12 Data Folder\bin\LuCatalog.exe.
4/8/2013, 10:23:50 GMT -> ProductRegCom/luGroup(PID=1736/TID=1460): Successfully created an instance of an luGroup object!
4/8/2013, 10:23:50 GMT -> ProductRegCom/luGroup(PID=1736/TID=1460): Path for calling process executable is F:\SEPM 12 Data Folder\bin\LuCatalog.exe.
4/8/2013, 10:23:50 GMT -> ProductRegCom/luProductReg(PID=1736/TID=1460): Destroyed luProductReg object.
4/8/2013, 10:23:50 GMT -> ProductRegCom/luGroup(PID=1736/TID=1460): Destroyed luGroup object.
////////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////////
// End LuComServer
////////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////////

Nguyen Cao's picture

Hi Rafeeq,

This is the result after running luall.exe. Seems nothing changed.

The following Symantec products and components are installed on your computer.
> LiveUpdate
> SEPM Behavior And Security Heuristics 12.1 RU2
> SEPM CIDS Signatures 12.1 RU2
> SEPM Content Catalog
> SEPM Extended File Attributes and Signatures 12.1 RU2
> SEPM Iron Revocation List 12.1 RU2
> SEPM Iron Settings 12.1 RU2
> SEPM Iron Whitelist 12.1 RU2
> SEPM SRTSP Settings
> SEPM Submission Control Data
> SEPM Virus Definitions Win32 12.1 RU2 H
> SEPM Virus Definitions Win64 (x64) 12.1 RU2 H
> SESM AntiVirus Client Win32
> SESM AntiVirus Client Win64
> SESM IPS Signatures Win32
> SESM IPS Signatures Win64
> SESM SEP PTS Content
> SESM SEP PTS Engine Win32
> SESM SEP PTS Engine Win64
> SESM Submission Control Data
> SESM Symantec Known Application System
> SESM Symantec Security Content A1
> SESM Symantec Security Content A1-64
> SESM Symantec Security Content B1
> SESM Symantec Security Content B1-64
> SPC AntiVirus Client Mac

Initializing...
Connecting to liveupdate.symantecliveupdate.com...
Connecting to liveupdate.symantec.com...
Connecting to update.symantec.com...
...
Downloading catalog file (6 of 37), complete.
...
Downloading catalog file (37 of 37), complete.
...

The following updates have been found:
> SEPM Virus Definitions Win32 12.1 RU2 H,  3105.9 KB
> SEPM Virus Definitions Win64 (x64) 12.1 RU2 H,  3102.0 KB
> SEPM Behavior And Security Heuristics 12.1 RU2,  1345.0 KB
> SESM Symantec Security Content A1,  12402.5 KB
> SESM Symantec Security Content A1-64,  12402.6 KB
> SESM Symantec Security Content B1,  74.7 KB
> SESM Symantec Security Content B1-64,  74.7 KB
> SESM IPS Signatures Win32,  1232.3 KB
> SESM IPS Signatures Win64,  1253.2 KB
> SEPM CIDS Signatures 12.1 RU2,  1479.8 KB
> SEPM Iron Whitelist 12.1 RU2,  10.2 KB
> SEPM Iron Revocation List 12.1 RU2,  7.1 KB
> SEPM Iron Settings 12.1 RU2,  7.6 KB
Total Download 36497.3 KB

The following updates have been aborted:
> SEPM Content Catalog has 1 aborted update(s).
Reason:
LU1845: This product was not updated due to a processing error.

> SESM AntiVirus Client Win32 has 1 aborted update(s).
Reason:
LU1875: This update failed during its preprocessing welcome text phase

> SESM AntiVirus Client Win64 has 1 aborted update(s).
Reason:
LU1875: This update failed during its preprocessing welcome text phase

> SPC AntiVirus Client Mac has 1 aborted update(s).
Reason:
LU1875: This update failed during its preprocessing welcome text phase

Downloading SEPM Virus Definitions Win32 12.1 RU2 H (1 of 1), complete.
Downloading SEPM Virus Definitions Win64 (x64) 12.1 RU2 H (1 of 1), complete.
Downloading SEPM Behavior And Security Heuristics 12.1 RU2 (1 of 1), complete.
Downloading SESM Symantec Security Content A1 (1 of 2), complete.
Downloading SESM Symantec Security Content A1 (2 of 2), complete.
Downloading SESM Symantec Security Content A1-64 (1 of 2), complete.
Downloading SESM Symantec Security Content A1-64 (2 of 2), complete.
Downloading SESM Symantec Security Content B1 (1 of 2), complete.
Downloading SESM Symantec Security Content B1 (2 of 2), complete.
Downloading SESM Symantec Security Content B1-64 (1 of 2), complete.
Downloading SESM Symantec Security Content B1-64 (2 of 2), complete.
Downloading SESM IPS Signatures Win32 (1 of 1), complete.
Downloading SESM IPS Signatures Win64 (1 of 1), complete.
Downloading SEPM CIDS Signatures 12.1 RU2 (1 of 1), complete.
Downloading SEPM Iron Whitelist 12.1 RU2 (1 of 1), complete.
Downloading SEPM Iron Revocation List 12.1 RU2 (1 of 1), complete.
Downloading SEPM Iron Settings 12.1 RU2 (1 of 1), complete.

Installing SEPM Virus Definitions Win32 12.1 RU2 H (1 of 1), failed.
LU1825: LiveUpdate could not understand how to install this update.  You may need to get the latest version of LiveUpdate before you can install this update.
Installing SEPM Virus Definitions Win64 (x64) 12.1 RU2 H (1 of 1), failed.
LU1825: LiveUpdate could not understand how to install this update.  You may need to get the latest version of LiveUpdate before you can install this update.
Installing SEPM Behavior And Security Heuristics 12.1 RU2 (1 of 1), failed.
LU1825: LiveUpdate could not understand how to install this update.  You may need to get the latest version of LiveUpdate before you can install this update.
Installing SESM Symantec Security Content A1 (1 of 2), failed.
LU1825: LiveUpdate could not understand how to install this update.  You may need to get the latest version of LiveUpdate before you can install this update.
Installing SESM Symantec Security Content A1 (2 of 2), failed.
LU1825: LiveUpdate could not understand how to install this update.  You may need to get the latest version of LiveUpdate before you can install this update.
Installing SESM Symantec Security Content A1-64 (1 of 2), failed.
LU1825: LiveUpdate could not understand how to install this update.  You may need to get the latest version of LiveUpdate before you can install this update.
Installing SESM Symantec Security Content A1-64 (2 of 2), failed.
LU1825: LiveUpdate could not understand how to install this update.  You may need to get the latest version of LiveUpdate before you can install this update.
Installing SESM Symantec Security Content B1 (1 of 2), failed.
LU1825: LiveUpdate could not understand how to install this update.  You may need to get the latest version of LiveUpdate before you can install this update.
Installing SESM Symantec Security Content B1 (2 of 2), failed.
LU1825: LiveUpdate could not understand how to install this update.  You may need to get the latest version of LiveUpdate before you can install this update.
Installing SESM Symantec Security Content B1-64 (1 of 2), failed.
LU1825: LiveUpdate could not understand how to install this update.  You may need to get the latest version of LiveUpdate before you can install this update.
Installing SESM Symantec Security Content B1-64 (2 of 2), failed.
LU1825: LiveUpdate could not understand how to install this update.  You may need to get the latest version of LiveUpdate before you can install this update.
Installing SESM IPS Signatures Win32 (1 of 1), failed.
LU1825: LiveUpdate could not understand how to install this update.  You may need to get the latest version of LiveUpdate before you can install this update.
Installing SESM IPS Signatures Win64 (1 of 1), failed.
LU1825: LiveUpdate could not understand how to install this update.  You may need to get the latest version of LiveUpdate before you can install this update.
Installing SEPM CIDS Signatures 12.1 RU2 (1 of 1), failed.
LU1825: LiveUpdate could not understand how to install this update.  You may need to get the latest version of LiveUpdate before you can install this update.
Installing SEPM Iron Whitelist 12.1 RU2 (1 of 1), failed.
LU1825: LiveUpdate could not understand how to install this update.  You may need to get the latest version of LiveUpdate before you can install this update.
Installing SEPM Iron Revocation List 12.1 RU2 (1 of 1), failed.
LU1825: LiveUpdate could not understand how to install this update.  You may need to get the latest version of LiveUpdate before you can install this update.
Installing SEPM Iron Settings 12.1 RU2 (1 of 1), failed.
LU1825: LiveUpdate could not understand how to install this update.  You may need to get the latest version of LiveUpdate before you can install this update.

Installation failed, error summary...
LU1806: LiveUpdate downloaded all of the updates you requested, but all of them failed to install.  Please try to get the updates at a later time.

LiveUpdate session is complete.

W007's picture

Hello,

LU1825: LiveUpdate could not understand how to install this update.  You may need to get the latest version of LiveUpdate before you can install this update.
Installing SEPM Iron Settings 12.1 RU2 (1 of 1), failed.
LU1825: LiveUpdate could not understand how to install this update.  You may need to get the latest version of LiveUpdate before you can install this update.

Installation failed, error summary...
LU1806: LiveUpdate downloaded all of the updates you requested, but all of them failed to install.  Please try to get the updates at a later time.

Which LUA version are you using ?

try to upgrade your lua version

https://www-secure.symantec.com/connect/blogs/live...

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

Nguyen Cao's picture

Thanks Manish,

I have just created a technical support case to get latest LUA and also try to find out the root cause. Anything new will be posted here.

Nguyen Cao's picture

Hi all, here is what I exactly do to solve the problem with Symantec support:

1. Repair the SEPM with the original install file in SEPM folder (extract the Part1_Installation file and go to SEPM folder). First run LUSETUP.EXE and then run Symantec Endpoint Protection Manager.msi. After the repair finish just select reconfigure SEPM and use the default parameter.

2. Go to Control Panel --> Open Symantec LiveUpdate (32 bits) Config --> Change the LU to Interactive mode.

3. Run luall.exe once again.

Now LiveUpdate can run properly.

Thank you all for valuable answer!

Regards,

Nguyen Cao

SOLUTION
TPanalyst's picture

I don't seen any SEP11 virus definitino listed here. Does that mean tha SEP11 virus definition will not be udpated ?

Regards