Endpoint Protection

Our SEPM server is running on Windows Server 2003 R2 32bit.

A user upgraded SEPM to SEPM 12 RU2 MP1 (12.1.2100) from SEPM 11 RU7 MP1(11.0.7101). He gave up backup because it's failed during upgrading. After installed complete, couldn't login to SEPM console and got stuck on login page. Then I helped to solve.

The database had problem after checked and the last backup was around year 2013.

Since database had problem, I uninstalled SEPM and removed all database. Also delete SEPM <dir> under "Program files" manually. Reinstall SEPM okay. But still stuck on SEPM logon page.

Also, tried to access http://<SEPM_IP_address>:9090 and it kept connecting without open page sucessfully.

I've tried many solutions that found on symantec forum and technical solution.

- HDD has 82GB disk space free
- Tried: dbvalidator.bat Tool  Checked the log: Database validation passed.
- ODBC > SymantecEndpointSecurityDSN Test connection ok
- http://localhost:8014/reporting can't access
- Install Java 6 update 31
- telnet necessary ports ok (9090, 8014, 8443)

I've no idea. Please help me how to solve.

Have you tried resetting the admin password? See doc below.

https://www-secure.symantec.com/connect/articles/how-reset-symantec-endpoint-protection-manager-console-password-sep-121

Hello,

SEPM 11 RU7 MP1(11.0.7101) to SEPM 12 RU2 MP1 (12.1.2100) is an unsupported migration.

Symantec Endpoint Protection 12.1.2100.2093 (RU2 MP1) can migrate seamlessly over the following:

• Symantec Endpoint Protection 12.1.2015.2015 (RU2)

https://www-secure.symantec.com/connect/blogs/latest-symantec-endpoint-protection-released-sep-121-ru2-mp1

In your case, you could have either migrated to the SEPM 12.1 RU2  

OR

migrated to the SEPM 12.1 RU5

 

In case you have an old Backup, I would suggest you to get the older SEPM 11 RU7 MP1(11.0.7101) installed back and restore the old database back. (Disaster Recovery)

http://www.symantec.com/docs/TECH102333

By working on the above article, you would be able to restore your older SEPM back.

Once done with the older SEPM and DB, migrate the SEPM to the Latest version of SEPM 12.1 RU5

Hope that helps!!

I didn't reset password as couldn't find this tool.

Since I connect that site to solve the problem through teamviewer, found that the version is SEPM 11 RU5 (11.0.5002.333) after installed back to SEPM 11.

I can login to SEPM console normally now. But cannot restore old database (Sep-2013 1.2GB)  as Restore failed reading from the backup file due to a problem with the file system. Also can't restore server certificate.

Since that site has around 30 computers only, I can arrage to reinstall SEP for all workstations.

I've downloaded SEP 12.1.5 (12.1 RU5) and can I do the following steps

1. Remove SEPM 11 RU5 (11.0.5002.333)
2. Install SEP 12.1.5 (12.1 RU5) directly.
3. Re-deploy SEP 12 to all workstations.

Please advise.

Acutally, I ever removed SEPM 11 RU5 ((11.0.5002.333) completely and installed SEPM 12 RU2 MP1 (12.1.2100). I don't know why couldn't login the console before.

Installing a new version will be less time consuming, install a fresh copy of SEPM 12.1.5, if you still cant login post the scm-server0.log might be a port issue

No need to remove 11.0.5, just run the 12.1.5 installer and it will upgrade over it.

Hi, I've upgraded from 11.0.5 to 12.1.5 successfully. But still can't login. Here is the scm-server0.log. (Please "Serious" is translated from chinese text as I installed chinese langange sepm)

Please help to look what happe. Thanks.

2015-04-01 16:55:33.920 THREAD 12 Serious: ================== Server Environment ===================
2015-04-01 16:55:33.920 THREAD 12 Serious: os.name = Windows 2003
2015-04-01 16:55:33.920 THREAD 12 Serious: os.version = 5.2
2015-04-01 16:55:33.920 THREAD 12 Serious: os.arch = x86
2015-04-01 16:55:33.920 THREAD 12 Serious: java.version = 1.7.0_55
2015-04-01 16:55:33.920 THREAD 12 Serious: java.vendor = Oracle Corporation
2015-04-01 16:55:33.920 THREAD 12 Serious: java.vm.name = Java HotSpot(TM) Server VM
2015-04-01 16:55:33.920 THREAD 12 Serious: java.vm.version = 24.55-b03
2015-04-01 16:55:33.920 THREAD 12 Serious: java.home = C:\Program Files\Symantec\Symantec Endpoint Protection Manager\jre
2015-04-01 16:55:33.936 THREAD 12 Serious: catalina.home = C:\Program Files\Symantec\Symantec Endpoint Protection Manager\tomcat
2015-04-01 16:55:33.936 THREAD 12 Serious: java.user = null
2015-04-01 16:55:33.936 THREAD 12 Serious: user.language = zh
2015-04-01 16:55:33.936 THREAD 12 Serious: user.country = TW
2015-04-01 16:55:33.936 THREAD 12 Serious: scm.server.version = 12.1.5337.5000
2015-04-01 16:55:34.217 THREAD 12 Serious: StartupServlet> startServer>> SEPM Service starting...
2015-04-01 16:55:34.217 THREAD 12 Info: Server startup
2015-04-01 16:55:36.483 THREAD 12 Serious: StartupServlet> verifySchemaVersion>> Database Schema Version = 12.1.5.4, Server Schema Version = 12.1.5.4
2015-04-01 16:55:36.936 THREAD 12 Info: License state check started
2015-04-01 16:55:37.014 THREAD 12 Info: LicenseManager.checkLicenseState(). License changed or license state = UNKNOWN. Starting detailed license status check
2015-04-01 16:55:37.030 THREAD 12 Info: EE License Helper Initialized
2015-04-01 16:55:37.108 THREAD 12 Info: EELicenseHelper.checkSeatsMapping(). Enterprise assignment algorithm started
2015-04-01 16:55:37.108 THREAD 12 Info: EELicenseHelper.checkSeatsMapping(). Enterprise assignment algorithm completed
2015-04-01 16:55:37.139 THREAD 12 Info: License state check completed. Exiting
2015-04-01 16:55:37.186 THREAD 12 Serious: StartupServlet> startServer>> FIPS mode configuration is false
2015-04-01 16:55:37.202 THREAD 12 Serious: License state = SEPE_UPGRADE
2015-04-01 16:55:37.202 THREAD 12 Serious: StartupServlet> startServer>> License status on SEPM = Good
2015-04-01 16:55:37.436 THREAD 12 Info: Initializing client transport (SEPM Web Server)

Is that a full log?

Upgrade is a two step, first it will upgrade sepm then db. If second part did not run like you dont see all the SEPM services in services.msc.Just reboot once and run the management server configuration wizard.

Upgrade is completed and all SEPM services are there.

 

I've reboot once and run the management server configuration wizard. And it's still unable to open SEPM.

as attached cap1.jpg.

 

Please see attached the log.   It just stop at Initializing client transport (SEPM Web Server).

as scm-server-0.log  

Any solution can do? Thanks.

(Please download attached issue.7z and extract it)

 

 

 

 

 

 

Pleo the issue should be with apache webserver, SEP 11 had IIS, 12 uses Apache,

do you have anyother version of apcahe installed? If you do a netstat -ano | find "9090"

who is using that , Symantec webserver?

Open services.msc

open the symantec webserver service, under logon change it to System , restart all three service and check again.

Checked that no other version of apached installed.

I find one things now. Attached please find the Server shows OpenSSL for SEPM Webserver service.

I've anohter two sites which can run SEPM12 normally and the SEPM Webserver service shows Apache.

Is this the problem that Apache is not really installed on this server? How to fix. Thanks.

 

 

 

check if you have this update installed.

Unable to access Symantec Endpoint Protection Manager Web Console after installing a Windows Security Update

http://www.symantec.com/business/support/index?page=content&id=TECH182352

 

Edit: On the server where you have problem, is it on Embedded DB or SQL? Because I dont see Embedded service in the services.msc screen shot you have posted.

Ref to your link, I've applied 971812 package and  is waiting them to restart the server now.

It is using Embedded DB as the sepm is Chinese Traditional language. So it displays chinese text as attached file.

 

Still no help after applied 971812 package and Server restarted.

Ref to http://www.symantec.com/business/support/index?page=content&id=TECH182352

I have checked another two sites that the SEPM Webserver service's description states "Apache/2.2.2215(Win32)"

Don't know why this server's  SEPM Webserver service states "Symantec Endpoint Protection Manager/2.4.6.153(Win32)"

But I check that apache <folder> is there.
C:\Program Files\Symantec\Symantec Endpoint Protection Manager\apache

 

Whats the version of sepm on all these sites? same version  and Enterprise Edition?

All are same product which are provided by me.

The other two sites are using SEPM 12.1.2 RU2 MP1.

And this Server whcih has problem is SEPM 12.1.5 RU5.

I've checked maunal that SEPM Webserver service's description  on version 12.5 is newer. So it won't display Apache.

Anyway, I return to start point.

Uninstall all SEPM and delete all sepm directory.  Reinstall whole SEPM once.

Still stuck sepm 12.1.5 logon page.

Will give up install to this server if have no solution.

On the other hand, this server 2003 didn't do any windows update. Will it help for doing win update?

 

 

We have switched to Kaspersky product and works now. During the installation, it detected incompatible 360 related something software was installed. But it's hard to remove. Needed to install 360 related software and uninstalled again.

Anyway, problem is fixed now.