Video Screencast Help

Symantec Endpoint Protection Manager service starts and stops inmediately

Created: 27 Mar 2014 | 29 comments

Seeing event viewer logs I see:

Faulting application name: httpd.exe, version: 2.2.22.4, time stamp: 0x4f71ed81
Faulting module name: secars.dll_unloaded, version: 0.0.0.0, time stamp: 0x4f8fc3a5
Exception code: 0xc0000005
Fault offset: 0x67eb5110
Faulting process id: 0x146c
Faulting application start time: 0x01cf49e59fb4be40
Faulting application path: C:\Program Files (x86)\Symantec\Symantec Endpoint Protection Manager\apache\bin\httpd.exe
Faulting module path: secars.dll
Report Id: ddbbdf2b-b5d8-11e3-8afa-00155de68d3b

Initialize Server Configuration Error (secars)

and: The Java Virtual Machine has exited with a code of -1, the service is being stopped. (semsrv)

As I see that many people updates sem-server-0.log and catalina.out I will try to upload mine

 

 

 

Operating Systems:

Comments 29 CommentsJump to latest comment

Rafeeq's picture

Follow this

Event ID 4096 Java -1 error in event viewer, SEPM service will not stay in started state. "Failed to connect to server" message during login to SEPM.

http://www.symantec.com/business/support/index?pag...

gmadoz's picture

Ok, I have just added this line, but I'm a afraid to run Symantec Management Configuration Wizard because I don't know what option choose: 1) Installmy first site, 2) Install an additional management server to an existing site or 3) Install an additional site...

Rafeeq's picture

None of these :)

You need to click on start- run - all programs - Symantec - Symante endpoint protection manager  -Management server configuration wizard, you should select Reconfigure the management server 

gmadoz's picture

But since Symantec Endpoint Protection Manager service stops I cannot enter the console, how should I do?

Rafeeq's picture

You need to click on Start - All Programs - Symantec - Symantec endpoint protection manager - Management server congfiguration wizard.

You dont have to log in to the console... 

gmadoz's picture

I have tehe following

Start-All Progams - Symantec Endpoint Protection Manager - Symantec Endpoint Protection Manager Tools- Management Server Configuration Wizard

There I don't know how tho follow because if I choose recovery file I have one file from 2012??? only

And if I don't use it al use the wizard takes to the 3 options I told you

 

Rafeeq's picture

You dont have to chose the recovery file, Can you try restarting symantec endpoint manager service and try to log in? Can you post a screen shot of the management server configuration wizard?

gmadoz's picture

I send both, the screen when I tried to login that fails because the service stopped and 3 screens of config wizard.

AttachmentSize
wizard.rar 251.09 KB
Rafeeq's picture

Are you trying to install Symantec endpoint protection for the first time? was it running before?

 

gmadoz's picture

It was running for 6 years !!!! and now has problems

I only know that the server on where is installed one month ago has not enough space

Rafeeq's picture

how many machines you have in your network? whats the version of SEPM?

Try doing a repari from add/ remove programs once repair is done it will run the management server config wizard..

gmadoz's picture

I have about 120 machines, the version is 12.1

I have only a change option on add/remove programs

Rafeeq's picture

select sepm and select change, it willl give you option to repair it, 

by the way do you see symantec embedded database service listed in services.msc?

Rafeeq's picture

something not right, did that repair complete? someone might have removed SEPM tried to do a disaster recovery..

gmadoz's picture

I tried to repair it but when finish it said "fatal error during installation"

Rafeeq's picture

I would sugget you to run the server confiruation wizard , install SEPM 

then use this option to connect all your previous clients

http://www.symantec.com/business/support/index?pag...

latest version of SEPM is 12.1.4 you can start with that.

gmadoz's picture

mmmm, it seems to be worst now

AttachmentSize
change.rar 73.97 KB
Rafeeq's picture

open task manager

kill explorer.exe

file - new task

explorer.exe

it would work 

To work around this issue, stop and restart the Explorer.exe process using Task Manager.

http://www.symantec.com/business/support/index?page=content&id=TECH197819
gmadoz's picture

I could repair and management wizard starts but I don't know how to complete this, for not loosing all the config and not creating nothing new

gmadoz's picture

If you can tell me how to follow and link with all the clients info, database, etc and not loosing nothing, would be very good!!!

Rafeeq's picture

when repair completes, it would start the management server configuration wizard , it should have an option of "Reconfigure management server" if you get that, then all is well. 

gmadoz's picture

After choosing the same config that on original installation I have the option to "use an existing database"

gmadoz's picture

I put all the same data that original installation but I have a problem, I want to use the existing database with its data and not clear to start cero installation, how can I do?

AttachmentSize
database.rar 105.74 KB
Ch@gGynelL_12's picture

Hi,

 

Try to perform disaster recovery to resolve your issue.. For the guide, please see link below..

 

Symantec Endpoint Protection 12.1: Best Practices for Disaster Recovery with the Symantec Endpoint Protection Manager

http://www.symantec.com/business/support/index?pag...

 

Regards,

JM

 

gmadoz's picture

Ok, it workeddddddddd!!!!!!!!!!!!!!!!!!!!. I reinstall using the existing database, previous backup, and with recovery file and lately restore, everything is ok now

 

Thanks very much people

 

Gabriel

suzunski@hotmail.com's picture

Hello everyone, please help me with a very bad problem. 

I have 170 workstations and client and manager installed on windows server 2008 r2. /symantec endpoint protection manager 12.1.1000.157/

SEMSRV service is stopped and start it after five seconds stops automatically.

I got the following errors;

SYSTEM:

Event ID 7031 - Service Control Manage /The Symantec Endpoint Protection Manager Webserver service terminated unexpectedly.It has done this 2 time(s).The following corrective action will be taken in 10000 milliseconds: Restart the service./

Event ID 7024 - Service Control Manage /The Symantec Endpoint Protection Manager Webserver service terminated with service-specific error Incorrect function../

APPLICATION:

Event ID 4096 - Semsrv /The Java Virtual Machine has exited with a code of -1, the service is being stopped./

Event ID 1000 - Application Error /Faulting application name: httpd.exe, version: 2.2.21.5, time stamp: 0x4e7aa075
Faulting module name: secars.dll_unloaded, version: 0.0.0.0, time stamp: 0x4eadfd61
Exception code: 0xc0000005
Fault offset: 0x71a45110
Faulting process id: 0xcc8
Faulting application start time: 0x01cf589d98577dc1
Faulting application path: C:\Program Files (x86)\Symantec\Symantec Endpoint Protection Manager\apache\bin\httpd.exe
Faulting module path: secars.dll
Report Id: e05b02d2-c490-11e3-961f-d485645b14fa/

 

Please help, аttach logs

AttachmentSize
Logs Symantec.zip 520.57 KB