Endpoint Protection

 I followed the instructions and make sure the services were stopped and proceeded with the installation of SEPM and it installed as it normally would but when it was done it never launched the upgrade screen I normally see. I rebooted after waiting 30 minutes and in the process of troubleshooting have come across the SEPM server trying to start over and over and over in the event manager. I have poured over the forums looking for anything to help and haven't found anything that has fixed it yet. 

Here is from the scm-serverlog0

Are you getting Java -1 or Java  in the event viewe?

Start the embedded database service then try to  start the symantec endpoint protection manager service and login

The log also has
com.sygate.scm.server.util.ServerException: Unexpected server error.

How much free space you have on the C drive...Check this out


Title: 'Symantec Endpoint Protection Manager failures caused by a lack of available disk space.'
Document ID: 2008040709530448
> Web URL: http://service1.symantec.com/support/ent-security.nsf/docid/2008040709530448?Open&seg=ent

 The Database was started, but I restarted and then attempted to start the SEPM service and it gave the same error.

Error 1067: The process terminated unexpectedly.

In the vent log it does not say anything about Java 1 error. Under application is keeps saying

The semsrv service has started.

But in the system log is says 

 You might have something there, I have 2.19GB free on the C drive, but 22 GB free on the D drive. It's been something Ive been fighting for eons and I fear it might be a root cause of the issue? This thing was installed to the D drive so I know it has room, but if C drive space is needed then its possibly the cause. I will try to free up more space and do a repair on it?

Go to

C:\Program Files\Symantec\Symantec Endpoint Protection Manager\Tomcat\conf\server.xml

Change the default value for the port from 8005 to 8006. Save this file and start the Symantec Endpoint Protection Manager service.

Then try to login

We ran out of C drive space on our SEPM server (well, we caught it before it got out of hand).  It seems SEPM still stores a lot on the C drive even if installed to D.  We ended up moving data around so we could expand the C partition to the full-size of the drive including what had been the D partition.  Even though SEPM was running on Server 2003, we used the Server 2008 install media in recovery mode (basically WinPE) to expand the partition using the DiskPart command.  We did that as it was free.  You could, of course, use commericial partition software as well.

 Same error after changing and saving the file, the service will start thens top right away.

What is the error in the eventveiwer now?

 Same as before under System.

Information

The Symantec Endpoint Protection Manager service entered the running state.

Then error

The Symantec Endpoint Protection Manager service terminated unexpectedly.  It has done this 2583 time(s).  The following corrective action will be taken in 10000 milliseconds: Restart the service.

That repeats 3 times a minute from the looks of it.

 Interesting, yeah that was something I had considered. I was also thinking of moving to the a spare server I have so I can install it with all defaults and a normal size C: drive. I figured it might have something to do with this but was never sure, and since I couldnt do that for a week at the moment I wanted to make a good go at getting SEPM running again! :)

Did you try doing a repair from add/ remove programs.

because you metioned that it never went to the second screen of upgrade.
try  doing a repair.. i think the migration is half done for the rest do a repair, u will get a db upgrade wizard.

you may try this

go to E:\Program Files\Symantec\Symantec Endpoint Protection Manager\bin

run the upgrade.dat.. once the upgade is complet u should be able to log in

I Agree with rafeeq. The database needs to be upgraded in order to work. No matter what port you change, it wont make a difference until the schema has been updated.

So, running the upgrade.bat will be the most relevent step in this case.

Best,
Aniket

I'm running into the same problem. I did run the upgrade.bat as well, and did a restart, but it didn't seem to help.

Well Connection Refused..

Go to \program files\symantec\\Symantec Endpoint Protection Manager\tomcat\etc\conf.properties
open with notepad

and check what is the value of 

scm.iis.http.port=xx
and how many times it is listed there
Then open IIS Manager go to properties of Symantec Webserver and make sure the same port number is listed there as in scm.iis.http.port

Says
scm.iis.http.port=80
IIS is listing SEPM wich is under the Default Website as running on port 80.

 Well...can post your logs aswell..and have you tried changing 8005 to 8006 and other JAVA -1 troubleshooting..

Had the same problem here.  Did the upgrade but didn't notice the upgrade screen I've seen for previous upgrades.  SEPM service won't.  I've tried rebooting, running a repair, running the installer again.

As I'm used to Symantec products screwing things over I took a snapshot of the server before I attempted the upgrade so I've rolled back to that.

run upgrade.bat to upgrade the DB aswell..that should fix your issue.
program files\SEPM\tools\upgrade.bat

Ran that.  The window opens and closes quickly and the service still won't start.

I'll log a call.  I don't care what anyone says about SEP anymore.  It is absolute rubbish as far as I'm concerned and I will NEVER purchase another Symantec AV product ever again.

I have the same problem. Anybody can help?

HI,

Can you post the contents of upgrade.log in tomcat\logs folder. We may get  some info from there.

Aniket

In upgrade log  last record  after upgrade version  11.0.2.0


Server HomeC:\Program Files\Symantec\Symantec Endpoint Protection Manager\tomcat
initDatasource dbport:2638
Config schema format is upgraded from: 11.0.2.0
Launch FRame
net stop semsrv
initDatasource dbport:2638
Has valid SAV license
Has valid SNAC license
Start UpdateLanguageForPackages...
Start updating luDownloadedContentArray...
Updating luDownloadedContentArray end
Start updating SoftwarePackage...
Updating SoftwarePackage end
Start updating SoftwarePackageCache...
Updating SoftwarePackageCache end
UpdateLanguageForPackages succeed
setActionOperandHash.ANOMALYREMEDIATION: A556A077C0A82DCB01AAB9A54A10B848 398EE10A4547D12123A900FE0FCD6C53
setActionOperandHash.ANOMALYREMEDIATION: 2B2CF0EBC0A82DCB00F1E1CC65847B6F 34D739AA66712C9810B02656C71B2BAF
setActionOperandHash.ANOMALYREMEDIATION: 5094AACFC0A82DCB018CE10FED3A2B2A 2D09C86AAC81D0CD36985B11EEBFAD85
setActionOperandHash.ANOMALYREMEDIATION: D34EED5DC0A82DCB016BA1FB671BB00A 215183B5B535859760AD22E53F34F2EC
setActionOperandHash.ANOMALYREMEDIATION: 770AA884C0A82DCB00A25138CEED2855 26E5BB1CCBD916AB371BF600CBE3EBCF
setActionOperandHash.ANOMALYREMEDIATION: B9646846C0A82DCB01686A3BCE0790D7 ABC62A7C97D7CB574AC524CA8DF03E3D
setActionOperandHash.ANOMALYREMEDIATION: B40AB6A8C0A82DCB018012225573F8EE A768EADEF996ECD9110C6BEE777CB8B4
**********************************************************
*****************************************************
setActionOperandHash Done.
addNewPackage packageZipFile:C:\Program Files\Symantec\Symantec Endpoint Protection Manager\tomcat\Packages\SAV32.dat packageInfoFile:C:\Program Files\Symantec\Symantec Endpoint Protection Manager\tomcat\Packages\SAV32.info
addNewPackage packageZipFile:C:\Program Files\Symantec\Symantec Endpoint Protection Manager\tomcat\Packages\SAV64.dat packageInfoFile:C:\Program Files\Symantec\Symantec Endpoint Protection Manager\tomcat\Packages\SAV64.info
Upgrade.reregisterLiveUpdateEntries.. Started
Upgrade.reregisterLiveUpdateEntries - DONE
Command output: [
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\semsrv\Parameters
JVM Option Number 0 REG_SZ -Xms512m

]
Command output: [
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\semsrv\Parameters
JVM Option Number 1 REG_SZ -Xmx1024m

]
Command output: [
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\semsrv\Parameters
JVM Option Number 2 REG_SZ -XX:MinHeapFreeRatio=40

]
Command output: [
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\semsrv\Parameters
JVM Option Number 3 REG_SZ -XX:MaxHeapFreeRatio=70

]
ServerUtil->getJVMSettings: company size = -1
jvm option 0: -Xms512m
jvm option 1: -Xmx1024m
jvm option 2: -XX:MinHeapFreeRatio=40
jvm option 3: -XX:MaxHeapFreeRatio=70
net stop semsrv





net stop w3svc
The World Wide Web Publishing Service service is stopping..
The World Wide Web Publishing Service service was stopped successfully.


C:\Program Files\Symantec\Symantec Endpoint Protection Manager\tomcat\bin\SemSvc.exe -uninstall semsrv
Служба успешно удалена.
net start w3svc
The World Wide Web Publishing Service service is starting.
The World Wide Web Publishing Service service was started successfully.


C:\Program Files\Symantec\Symantec Endpoint Protection Manager\tomcat\bin\SemSvc.exe -install semsrv C:\Program Files\Symantec\Symantec Endpoint Protection Manager\jdk\jre\bin\server\jvm.dll -Xms512m -Xmx1024m -XX:MinHeapFreeRatio=40 -XX:MaxHeapFreeRatio=70 -Djava.endorsed.dirs=C:\Program Files\Symantec\Symantec Endpoint Protection Manager\tomcat\common\endorsed -Djava.class.path=C:\Program Files\Symantec\Symantec Endpoint Protection Manager\jdk\lib\tools.jar;C:\Program Files\Symantec\Symantec Endpoint Protection Manager\tomcat\bin\bootstrap.jar -Dcatalina.base=C:\Program Files\Symantec\Symantec Endpoint Protection Manager\tomcat -Dcatalina.home=C:\Program Files\Symantec\Symantec Endpoint Protection Manager\tomcat -Djava.library.path=%PATH%;C:\Program Files\Symantec\Symantec Endpoint Protection Manager\tomcat\bin\; -Djava.io.tmpdir=C:\Program Files\Symantec\Symantec Endpoint Protection Manager\tomcat\temp -start org.apache.catalina.startup.Bootstrap -disp Symantec Endpoint Protection Manager -desc Сервер приложений взаимодействует с консолями Symantec Endpoint Protection Manager, клиентами Symantec Protection и базой данных. -params start -stop org.apache.catalina.startup.Bootstrap -method main -params stop -out C:\Program Files\Symantec\Symantec Endpoint Protection Manager\tomcat\logs\catalina.out -err C:\Program Files\Symantec\Symantec Endpoint Protection Manager\tomcat\logs\catalina.err -current C:\Program Files\Symantec\Symantec Endpoint Protection Manager\tomcat\bin
Служба успешно установлена.
C:\Program Files\Symantec\Symantec Endpoint Protection Manager\tomcat\..\bin\ServiceUtil.exe -service semsrv -setservicerecovery

ServiceUtil return code: 0
Reset Semsrv done.
Starting service ...
The Symantec Endpoint Protection Manager service is starting.
The Symantec Endpoint Protection Manager service was started successfully.

Starting console on Windows ...
Run command: C:\Program Files\Symantec\Symantec Endpoint Protection Manager\tomcat\..\bin\sesm.bat
Папка экспорта недопустима.

 

We have some part of the log in russian language. Here is the translation [ thanks to google translator ]:


russian:

Служба успешно удалена. - Service successfully removed.
Сервер приложений взаимодействует с консолями - The application server interacts with the console
клиентами - customers
и базой данных - and database
Служба успешно установлена. - Service successfully installed.
Папка экспорта недопустима. - Folder export unacceptable.


Do you have russian language installed on your machine?

Aniket

Yes I have russian language on my server and install this version Symantec_Endpoint_Protection_11.0.5_AllWin_RU 

 scm-serverlog0

2009-10-28 10:26:28.593 SEVERE: Unknown Exception
java.sql.SQLException: JZ006: Caught IOException: java.net.SocketTimeoutException: Read timed out
at com.sybase.jdbc2.jdbc.ErrorMessage.raiseError(ErrorMessage.java:611)
at com.sybase.jdbc2.jdbc.ErrorMessage.raiseErrorCheckDead(ErrorMessage.java:855)
at com.sybase.jdbc2.tds.Tds.handleIOE(Tds.java:3967)
at com.sybase.jdbc2.tds.Tds.handleIOE(Tds.java:3912)
at com.sybase.jdbc2.tds.Tds.nextResult(Tds.java:2329)
at com.sybase.jdbc2.jdbc.ResultGetter.nextResult(ResultGetter.java:69)
at com.sybase.jdbc2.jdbc.SybStatement.nextResult(SybStatement.java:220)
at com.sybase.jdbc2.jdbc.SybStatement.nextResult(SybStatement.java:203)
at com.sybase.jdbc2.jdbc.SybStatement.updateLoop(SybStatement.java:1720)
at com.sybase.jdbc2.jdbc.SybStatement.executeUpdate(SybStatement.java:1703)
at com.sybase.jdbc2.jdbc.SybPreparedStatement.executeUpdate(SybPreparedStatement.java:115)
at org.apache.commons.dbcp.DelegatingPreparedStatement.executeUpdate(DelegatingPreparedStatement.java:101)
at com.sygate.scm.server.agentmanager.AgentTableHandler.updateClient(AgentTableHandler.java:432)
at com.sygate.scm.server.agentmanager.AgentTableHandler.update(AgentTableHandler.java:384)
at com.sygate.scm.server.agentmanager.AgentTableHandler.update(AgentTableHandler.java:371)
at com.sygate.scm.server.agentmanager.AgentRequestHandler.agentRegister(AgentRequestHandler.java:582)
at com.sygate.scm.server.agentmanager.AgentRequestHandler.handleRequest(AgentRequestHandler.java:236)
at com.sygate.scm.server.servlet.AgentServlet.doPost(AgentServlet.java:52)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:810)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:199)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:145)
at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:210)
at org.apache.catalina.core.StandardPipeline$StandardPipelineValveContext.invokeNext(StandardPipeline.java:596)
at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:433)
at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:955)
at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:139)
at org.apache.catalina.core.StandardPipeline$StandardPipelineValveContext.invokeNext(StandardPipeline.java:596)
at org.apache.catalina.valves.CertificatesValve.invoke(CertificatesValve.java:198)
at org.apache.catalina.core.StandardPipeline$StandardPipelineValveContext.invokeNext(StandardPipeline.java:594)
at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:433)
at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:955)
at org.apache.catalina.core.StandardContext.invoke(StandardContext.java:2460)
at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:133)
at org.apache.catalina.core.StandardPipeline$StandardPipelineValveContext.invokeNext(StandardPipeline.java:596)
at org.apache.catalina.valves.ErrorDispatcherValve.invoke(ErrorDispatcherValve.java:119)
at org.apache.catalina.core.StandardPipeline$StandardPipelineValveContext.invokeNext(StandardPipeline.java:594)
at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:117)
at org.apache.catalina.core.StandardPipeline$StandardPipelineValveContext.invokeNext(StandardPipeline.java:594)
at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:433)
at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:955)
at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:127)
at org.apache.catalina.core.StandardPipeline$StandardPipelineValveContext.invokeNext(StandardPipeline.java:596)
at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:433)
at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:955)
at org.apache.coyote.tomcat4.CoyoteAdapter.service(CoyoteAdapter.java:157)
at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:874)
at org.apache.coyote.http11.Http11BaseProtocol$Http11ConnectionHandler.processConnection(Http11BaseProtocol.java:665)
at org.apache.tomcat.util.net.PoolTcpEndpoint.processSocket(PoolTcpEndpoint.java:528)
at org.apache.tomcat.util.net.LeaderFollowerWorkerThread.runIt(LeaderFollowerWorkerThread.java:81)
at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:689)
at java.lang.Thread.run(Thread.java:595)
2009-10-28 10:42:44.961 SEVERE: AgentLastCheckInTask connect to secars failed: SERVICE NOT AVAILABLE
2009-10-28 10:42:47.071 SEVERE: ================== StartClientTransport ===================
2009-10-28 10:42:47.243 SEVERE: Schedule is stopped!

 

And Windows System log

Event ID 7031
The Symantec Endpoint Protection Manager service terminated unexpectedly. It has done this 1296 time(s). The following corrective action will be taken in 10000 milliseconds: Restart the service.

every 2 seconds
 

I have seen this error if   the server is a cluster server,

Title: 'Installing a Symantec Endpoint Protection client to a cluster server'

Document ID: 2008120113202748

> Web URL: http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2008120113202748?Open&seg=ent

The Symantec Endpoint Protection service terminated unexpectedly. It has done this [...] time(s). The following corrective action will be taken in 10000 milliseconds: Restart the servic

I had the same problem the database did not  upgraded at first time, what i did i restarted the machine and ran again the setup and it done the upgrade but lost the path on the ODBC and i just cofigured it again and now it's working well!!!

To Prachand:
It is not cluster server

Rodrigo Benedik 
I can't run setup again. I'm starting setup ,it work few minut and terminate

I'm run setup again and it done,but nothing change.Get this error every time 
Event ID 7031
The Symantec Endpoint Protection Manager service terminated unexpectedly. It has done this ..... time(s). The following corrective action will be taken in 10000 milliseconds: Restart the service.

I'm also can't backup my database. Backup and Restore wizard don't start ,while Symantec Embedet database service is start  

Help me please....

https://www-secure.symantec.com/connect/articles/access-various-wizards-and-consoles-using-bat-files-spc

PLease use the article above to launch the database backup wizard manually.

Aniket

Wizard don't start ....

This is report of Symantec Endpoint Support Tool rapidshare.com/files/301782413/OBAV01__2009_11_03__13_11_24_Full.sdbz.html  
Maybe it help to find solution

I find solution to my problem
1. Copy sem5.db and log files to another location
2.Unistall symantec protection manager
3.Reinstall
4.Stop Services
5. Replace sem5,db and log files to previous   
6. Start Services and make backup
7. Restore backup
8. Restore the server certificate
http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007082112135948