Endpoint Protection

 View Only
Back to discussions
Expand all | Collapse all

SEPM to RU6 MP2, some clients "Fail to execute Host Integrity check"

Aleksandar Devecerski

Aleksandar DevecerskiOct 03, 2015 10:51 AM

DR?
ℬrίαη

ℬrίαηOct 03, 2015 02:31 PM

welcome

  • 1.  SEPM to RU6 MP2, some clients "Fail to execute Host Integrity check"

    Posted Oct 02, 2015 08:48 AM

    Hi everyone

    Just upgraded SEPM from RU6 MP1a to RU6 MP2 and couple of clients reported Host Integrity Failed, with below error in logs.

    HI Error.jpg

    HI policy applied is pretty much default

    HI policy.1.jpg   HI policy.2.jpg

    Tried CleanWipe/reinstall on one of the clients, error still active.
    Affected clients are Windows, different OSs, latest SP/fully updated, RU6 MP1a, have in common that all are 32 bit. That being said, most of the 32-bit clients are not affected.

    Anyone else seeing this?

     

     



  • 2.  RE: SEPM to RU6 MP2, some clients "Fail to execute Host Integrity check"

    Posted Oct 02, 2015 08:52 AM

    Does it look like this issue? Did you update the client as well?

    New fixes and component versions in Symantec Endpoint Protection 12.1.6 MP2

    SEP 12.1 RU3 and earlier clients that are managed by SEPM 12.1 RU6 will fail Host Integrity compliance check

    Fix ID: 3802418

    Symptom: Host Integrity check always fails for Symantec Endpoint Protection 12.1 RU3 (12.1.3) and earlier clients that are managed by Symantec Endpoint Protection Manager 12.1 RU6 (12.1.6).

    Solution: Fixed the launcher command line parameters in running the script on the client during HI compliance check.

    Being that MP2 just came out yesterday, you may be one of, if not the first to see this



  • 3.  RE: SEPM to RU6 MP2, some clients "Fail to execute Host Integrity check"

    Posted Oct 02, 2015 09:00 AM

    Hi Brian

    My clients are all RU6 MP1a, worked just fine with RU6 MP1a SEPM.



  • 4.  RE: SEPM to RU6 MP2, some clients "Fail to execute Host Integrity check"

    Posted Oct 02, 2015 09:06 AM

    this is noted issue, so you need to upgrade to your client to SEP 12.1 RU6 MP2



  • 5.  RE: SEPM to RU6 MP2, some clients "Fail to execute Host Integrity check"

    Posted Oct 02, 2015 09:12 AM

    The fix applies only to clients from RU3 and earlier. In any event I would upgrade one of your affected clients to see what the result is.

    If it is not fixed after upgrading, I would get a case open with support.



  • 6.  RE: SEPM to RU6 MP2, some clients "Fail to execute Host Integrity check"

    Posted Oct 02, 2015 09:39 AM

    I've downladed complete package few hours ago. After SEPM upgrade the only new installation package in SEPM is RU6 MP2 for Mac. Win clients are all MP1a (12.1.6318.6100).

    Edit: just downloaded All_Clients package, Windows clients are MP1a, exactly like in Full_Installation package.

    No Windows RU6 MP2 clients!?



  • 7.  RE: SEPM to RU6 MP2, some clients "Fail to execute Host Integrity check"

    Posted Oct 02, 2015 09:50 AM

    Good catch. Looks like clients remain at MP1a.

    Since this update only resolved one SEPM and one Mac issue plus introduced supoprt for Mac 10.11 I guess no new updates were needed for Windows clients.

     



  • 8.  RE: SEPM to RU6 MP2, some clients "Fail to execute Host Integrity check"

    Posted Oct 03, 2015 05:04 AM

    Well, seeing there is no info regarding later release of RU6 MP2 Win clients I guess revert to RU6 MP1a SEPM is the only option.

    Someone done this before?
    I'm not anticipating any issues, but better safe then sorry.

     



  • 9.  RE: SEPM to RU6 MP2, some clients "Fail to execute Host Integrity check"

    Posted Oct 03, 2015 08:05 AM

    There is no official roll back. You'll need to follow the DR process.



  • 10.  RE: SEPM to RU6 MP2, some clients "Fail to execute Host Integrity check"

    Posted Oct 03, 2015 10:51 AM

    DR?



  • 11.  RE: SEPM to RU6 MP2, some clients "Fail to execute Host Integrity check"

    Posted Oct 03, 2015 11:33 AM

    Disaster Recovery:

    Disaster recovery best practices for Symantec Endpoint Protection 12.1



  • 12.  RE: SEPM to RU6 MP2, some clients "Fail to execute Host Integrity check"

    Posted Oct 03, 2015 01:52 PM

    Disaster recovery, ok.

    I'll have to think a little about that.

    Thanks Brian



  • 13.  RE: SEPM to RU6 MP2, some clients "Fail to execute Host Integrity check"

    Posted Oct 03, 2015 02:31 PM

    welcome



  • 14.  RE: SEPM to RU6 MP2, some clients "Fail to execute Host Integrity check"

    Posted Nov 04, 2015 09:27 AM

    Quick update
    Issue still here after SEPM/client upgrade to RU6 MP3 (12.1.6.6608.6300).



  • 15.  RE: SEPM to RU6 MP2, some clients "Fail to execute Host Integrity check"

    Posted Nov 27, 2015 10:32 AM

    So outside of the bug in SEP 12.1.3 and then now under the very latest release/version/maintenance release, is it wise to still perform the troubleshooting and send to Symantec via: How to debug the Symantec Endpoint Protection client (Article: TECH102412)(Host Integrity)