Video Screencast Help
Search Video Help Close Back
to help
New in the Rewards Catalog: Vouchers for "Symantec Technical Specialist" and "Symantec Certified Specialist" exams.

SEPM console opens and closes after login

Updated: 21 May 2010 | 33 comments
sssstew's picture
+1 1 Vote
Login to vote

Hi All

We recently upgraded the SEPM server from 11.4 to 11.5 (without issue), this uses the new Java 6 version of the management console, so on my works PC i went to http://servername:9090 downloaded the java upgrade then downloaded and installed the new SEPM console and it works fine, but on one of our workstations we have an issue whereby i have completed the above steps (and even rebooted etc) but it wont stay logged into the console no matter what account i use, it just logs in loads then exits straight back out to the login screen.

Any ideas anyone?

Cheers
Stew

Comments

jomargonzales's picture
21
Oct
2009
1 Vote +1
Login to vote

Try to remove all Java

Try to remove all Java installed on your PC and retry the procedures.

Jomar Gonzales

shp's picture
21
Oct
2009
2 Votes +2
Login to vote

Check the

Check the  scm-server-0.log(Program Files\Symantec\Symantec Endpoint Protection Manager\tomcat\logs) file, IIS logs...
Also alter the console timeout settings(Admin--> Servers-->local site properties)..... 

Regards,
Srinivas H.P.
HCL Infosystems Ltd

sandip_sali's picture
21
Oct
2009
0 Votes 0
Login to vote

SEPM Login

This generally happens because of ODBC connection not established correctly.
Java Static Heap is not up to the mark.
User Group Everyone not added with full permissions into the inetpub folder properties.

To solve this issue, follow the steps below:
Increase the JVM static heap to 1GB
Locate the following registry key:
HKLM\SYSTEM\CurrentControlSet\Services\semsrv\Parameters\

Locate the following keys:
JVM Option Number 0
JVM Option Number 1

Adjust the key values upward, and match the key values.
Create a 1GB static heap, set JVM Option Number 0 to -Xms1024m, and set JVM Option Number 1 to -Xmx1024m
Restart the Symantec Endpoint Protection Manager service.

Thanks & Regards Sandip C Sali

Acretian's picture
21
Oct
2009
0 Votes 0
Login to vote

on the Login screen Type the

on the Login screen

Type the IP address of the system where it says Localhost:8443 (IP:8443)
It worked for me

Rafeeq's picture
22
Oct
2009
0 Votes 0
Login to vote

Hi

I agree with acretian,

 check if resolves the server name.

put IP address and try should be able to log in.

if that works, add ip in your host file

Please don't forget to mark your thread solved with whatever answer helped you : ) Rafeeq

sssstew's picture
22
Oct
2009
0 Votes 0
Login to vote

Thanks everyone, no luck so

Thanks everyone, no luck so far though, done the following :-

removed and reinstalled java on affected workstation
increased my static heap to 1gb on server, service restarted
confirmed that name of the server is in the login screen, and name resolves.

Its definatley something local on this machine, as all my other remote consoles work.  Also its something specific to running it as the specific user, as to test i did a 'run as' and use the admin account on IE, opened up http://servername:9090, installed the console then ran it and it opens fine, but close it off and open it as the normal domain user and it fails again.  It just logs in then back out again, this is using any account to try and log into the SEPM console....

hmmmm what next?

sssstew's picture
22
Oct
2009
0 Votes 0
Login to vote

Thanks everyone, no luck so

Thanks everyone, no luck so far though, done the following :-

removed and reinstalled java on affected workstation
increased my static heap to 1gb on server, service restarted
confirmed that name of the server is in the login screen, and name resolves.

Its definatley something local on this machine, as all my other remote consoles work.  Also its something specific to running it as the specific user, as to test i did a 'run as' and use the admin account on IE, opened up http://servername:9090, installed the console then ran it and it opens fine, but close it off and open it as the normal domain user and it fails again.  It just logs in then back out again, this is using any account to try and log into the SEPM console....

hmmmm what next?

Acretian's picture
23
Oct
2009
0 Votes 0
Login to vote

Hi sometimes this happens ,

Hi
sometimes this happens , So try using the ip instead of the name of the server on the login screen. This happened to me once and used IP instead of name and it worked fine

jomargonzales's picture
22
Oct
2009
0 Votes 0
Login to vote

Java on IE

Try this. Check if Java is enabled on your IE configuration. Open your IE. Go to Tools > Internet Options > Advanced. Check the Java checkbox.

Jomar Gonzales

AravindKM's picture
22
Oct
2009
0 Votes 0
Login to vote

Any error in event viewer?

Any error in event viewer? Also try to login from windows admin account.... 

Please don't forget to mark your thread solved with whatever answer helped you : ) Thanks & Regards Aravind

sssstew's picture
25
Oct
2009
0 Votes 0
Login to vote

tried with the IP and still

tried with the IP and still no luck.

Checked java enabled in IE config, already ticked.

No errors in the windows event log.

From my admin account it works fine though....

jomargonzales's picture
25
Oct
2009
0 Votes 0
Login to vote

Local Admin Account Group

Hello! Check your domain ID if added in the local admin group.

Jomar Gonzales

Aniket Amdekar's picture
25
Oct
2009
0 Votes 0
Login to vote

If you go to strt->run>

If you go to strt->run> %temp% , do you see a file called scm-ui.log?

This log file records all the interactions with the UI.

Aniket

sssstew's picture
25
Oct
2009
0 Votes 0
Login to vote

Aniket, heres the log

Aniket, heres the log contents :-

English
LoginPanel->getLoginAttr:  file: C:\DOCUME~1\monitor\LOCALS~1\Temp\sesm.xml file exists: true
LoginPanel->getLoginAttr: attr: locationCounting value: true
LoginPanel->getLoginAttr:  file: C:\DOCUME~1\monitor\LOCALS~1\Temp\sesm.xml file exists: true
LoginPanel->getLoginAttr: attr: getAllGroupLocations value: true
LoginPanel->getLoginAttr:  file: C:\DOCUME~1\monitor\LOCALS~1\Temp\sesm.xml file exists: true
LoginPanel->getLoginAttr: attr: option value: less
LoginPanel->getOptionButton option = less
LoginPanel->getLoginAttr:  file: C:\DOCUME~1\monitor\LOCALS~1\Temp\sesm.xml file exists: true
LoginPanel->getLoginAttr: attr: locationCounting value: true
LoginPanel->getLoginAttr:  file: C:\DOCUME~1\monitor\LOCALS~1\Temp\sesm.xml file exists: true
LoginPanel->getLoginAttr: attr: getAllGroupLocations value: true

############# Begin Login ###############
GUIManager>> login: After session got cleaned up!
============= After login: Begin =============
time=2009-10-26 09:30:12
>>> GetObject(getObjectByGUID): SemSite  36CD88C70A960A8E00937CEAEE875C82  1256513412382, duration: 0.032s (32.0)
============= Set up reporting once =============
============= After login: elapsed (secs): 0.39
Reporting login start...
>>> GetObject(getObjectByGUID): SemConfigRoot  B655E64D0A320801000000E164041B79  1256513412428, duration: 0.031s (31.0)
>>> GetObject(getObjectByGUID): SemDomain  28F4B7BA0A960A8E01873AD9AFA5FE05  1256513412475, duration: 0.047s (47.0)

>>>MainPanel: CreateHomePanel: Duration: 0.0s (0.0ms)
============= Got lock on PHP session ID in (secs): 2
>>>MainPanel: CreateMonitorPanel: Duration: 0.016s (16.0ms)
>>>MainPanel: CreateReportPanel: Duration: 0.0s (0.0ms)
>>>MainPanel: CreatePolicyPanel: Duration: 0.0s (0.0ms)
>>>MainPanel: CreateComputerUserPanel: Duration: 0.015s (15.0ms)
>>>MainPanel: CreateAdminPanel: Duration: 0.032s (32.0ms)

MainPanel::Button clicked begin
MainPanel::Button clicked end: [Product Overview]:  1256513415534, duration: 0.0s (0.0)
############# Ater Login ###############  1256513415550, duration: 3.574s (3574.0)
Response code after sending command for JNDI: 0
Stopping all background threads in console...
Mon Oct 26 09:30:16 GMT+10:00 2009: Not Tracking User Interaction Any Longer
Mon Oct 26 09:30:16 GMT+10:00 2009: Not Monitoring Server System Log Any More
>>> GetStateObject: AdministratorState  7E50E2EB0A960A8E001B380C859D348C  1256513416439, duration: 0.015s (15.0)
>>> UpdateStateObject  com.sygate.scm.common.configobject.schema.AdministratorState  84C6C4060A960A8E01D95BB51B9DFC12  1256513416486, duration: 0.047s (47.0)
Logging off...
Logoff successfully!
Mon Oct 26 09:30:16 GMT+10:00 2009Not refreshing Data Cache any longer
LoginPanel->getLoginAttr:  file: C:\DOCUME~1\monitor\LOCALS~1\Temp\sesm.xml file exists: true
LoginPanel->getLoginAttr: attr: option value: less
LoginPanel->getOptionButton option = less
 

kalyan makkena's picture
26
Oct
2009
0 Votes 0
Login to vote

for me this happens when i

for me this happens when i set internet explorer settings to use a proxy server. Remove proxy if exists and see

sssstew's picture
26
Oct
2009
0 Votes 0
Login to vote

Removed the proxy settings in

Removed the proxy settings in IE, still no luck :(

Acretian's picture
26
Oct
2009
0 Votes 0
Login to vote

as said by jomargonzales try

as said by jomargonzales
try to add the domain account to the local admin group and check what happens.
If its not working, try running a repair install and check

sssstew's picture
26
Oct
2009
0 Votes 0
Login to vote

It was already in the local

It was already in the local admin group, must have been done for something else previously.

When you say repair install, not sure what you mean, ive tried uninstalling Java and the SEPM console, rebooting then reinstalling but no luck.  Its gotta be something to do with this new version of java as the SEPM console worked before back in MR4, its only the new RU5 update that uses the new java that is having the problem... hmmmm damn java

Acretian's picture
26
Oct
2009
0 Votes 0
Login to vote

When you run the program as

When you run the program as local admin it works, Can you try it on a different PC and see whether it works also make sure it has a lower version of Java

Bryon's picture
27
Oct
2009
0 Votes 0
Login to vote

I had the same issue and the

I had the same issue and the fix was to back date to Java 6.13:

  1. Connect to the management console using the <IP address of the server>:9090 (need to use the IP address)
  2. Install the version of JAVA that comes with Ru5 (6.14) 
  3. Next Install the remote management  console
  4. Next uninstall Java 6.14
  5. Finally install Java 6.13

Hope this helps,
Bryon

 

sssstew's picture
27
Oct
2009
0 Votes 0
Login to vote

i was hopeful that would fix

i was hopeful that would fix the issue Bryon but still no luck :(  After it re-downloaded the management console when i downgraded java it still does the same, login then straight back out.

Aniket Amdekar's picture
27
Oct
2009
0 Votes 0
Login to vote

Hi, Have you tred putting in

Hi,

Have you tred putting in x.x.x.x:8443 at the login screen instead of localhost:8443?

Also, you can try with the servername:8443 as well.

Aniket

sssstew's picture
28
Oct
2009
0 Votes 0
Login to vote

yeah, tried both the host

yeah, tried both the host name and the IP, still the same problem

Ghent's picture
28
Oct
2009
0 Votes 0
Login to vote

Vista?

I'm not sure if your workstation is Vista, but in Vista I believe the remote console required the "Run as Administartor" option.

sssstew's picture
28
Oct
2009
0 Votes 0
Login to vote

nah, windows XP

nah, windows XP

snekul's picture
28
Oct
2009
0 Votes 0
Login to vote

Do you have any IE security

Do you have any IE security group policies (or directly configred security settings) that might cause issues?  If so, can you try from a "clean" computer without those settings. Any custom Java certificate configurations in use?

Eric C. Lukens IT Security Policy and Risk Assessment Analyst University of Northern Iowa

Bryon's picture
29
Oct
2009
0 Votes 0
Login to vote

When you use RunAs to open

When you use RunAs to open Remote Console, do you log in to the Remote Console with the same account  as the one that normally fails or the one that you used to open the console? Is your DB embedded? Do you bounce authentication off a LDAP server (AD)?

sssstew's picture
29
Oct
2009
0 Votes 0
Login to vote

when i use the run as, i can

when i use the run as, i can log into the console with any account ok.  When i dont use run as i cannot log in with any account.

The DB is a remote SQL.  and yes authentication is AD.

Bryon's picture
30
Oct
2009
0 Votes 0
Login to vote

Is your RunAs account Local

Is your RunAs account Local admin or Domain Admin? Check to see if there are any group policies etc... that might be applied to just this system and not being applied to the other systems around it. The policy may not apply to the domain admin account). Since, you are able to access the program I’d assume that it’s not Java or the user account.

Maybe one of the Symantec guy’s can chime in and let us know what else may make the Remote Console itself need elevated privileges to run. 

AravindKM's picture
31
Oct
2009
0 Votes 0
Login to vote

Go to start -->RunType

Go to start -->Run

Type rsop.msc

It will give you the list of policies
currently applied to your system

Do the same in other pc of which you
are able to access the sepm

Compare and fin out which policy is
blocking and change that policy in domain
Take special care abut the policies which is related to network.

 

Please don't forget to mark your thread solved with whatever answer helped you : ) Thanks & Regards Aravind

Nel Ramos's picture
01
Nov
2009
0 Votes 0
Login to vote

Hi Team, If the issue is just

Hi Team,

If the issue is just local and all others are working with their present configs..
Why not replicate the profiles of the other working PC then you wouldn't have a hard time configuring the issue...

Re-image... If possible...
Because there might be a setting that was change prior to you using the pc for SEPM...
thanks...

Nel Ramos

sssstew's picture
01
Nov
2009
0 Votes 0
Login to vote

Thanks for everyones

Thanks for everyones thoughts.

We do have different GPOs applied but none relating to security or java, just things like screensaver on and stuff like that.

The run as account i used when it works is a domain admin, where as the normal user account is a local admin only, i cant see how domain admin rights needs to be granted to run a java console though.

And re-imaging a machine is a bit out there, just to get a console working on one workstation, we would probably just not use it.

Its something java related, and seems like permissions even though the user is local admin but i cant for the life of me figure out what it is.  Especially as the console upgrade worked on our other workstations.

Might never get to the bottom of this one then.... :(

Bryon's picture
02
Nov
2009
0 Votes 0
Login to vote

If you're convinced

If you’re convinced that it’s a Java issue try playing around with the different versions of Java.  The issue I had was that any version of Java above 6.13 did not work and gave the same symptom as you’re seeing.  One difference in what I saw and you're seeing is that I was unable to login using any account.

As a test you may want to try moving the workstation under a group where no policies are applied and see if that helps.

Other than that I’m out of ideas too.  I’m curious as to what the problem turns out to be, so if you get it resolved please post it.  Good luck