Endpoint Protection

 View Only
  • 1.  Failed to start LSB: Symantec AntiVirus Scanner

    Posted Oct 18, 2019 03:27 PM

    I am attempting to install Symantec Endpoint Protection 14.2.4815-1100 on Red Hat Enterprise Linux 7.7 and I am able to install rtvscand and symcfgd but it does not like smcd. I decided to start from scatch and I'll post what I am doing. I'm not sure if this is important, but I noticed which I use the "check packages signature" option it outputs:  

    Checking signature on sep.rpm
    sep.rpm signature verification FAILED
    Packages signature serification failed.

    Here is the output when I try to install it:

    [root@servername Symantec]# ./install.sh -i
    Starting to install Symantec Endpoint Protection for Linux
    Performing pre-check...
    Pre-check succeeded
    Begin installing virus protection component
    Preparing...                          ################################# [100%]
    Performing pre-check...
    Pre-check is successful
    Updating / installing...
       1:sep-14.2.4815-1100               ################################# [100%]
    Virus protection component installed successfully
    Begin installing Auto-Protect component
    Preparing...                          ################################# [100%]
    Performing pre-check...
    Pre-check is successful
    Updating / installing...
       1:sepap-x64-14.2.4815-1100         ################################# [100%]
    Auto-Protect component installed successfully
    Begin installing GUI component
    Preparing...                          ################################# [100%]
    Performing pre-check...
    Pre-check is successful
    Updating / installing...
       1:sepui-14.2.4815-1100             ################################# [100%]
    GUI component installed successfully
    Pre-compiled Auto-Protect kernel modules are not loaded yet, need compile them from source code
    Build Auto-Protect kernel modules from source code successfully
    failed to start smcd .
    Running LiveUpdate to get the latest defintions...
    Update was successful
    Installation completed
    =============================================================
    Daemon status:
    symcfgd                   [running]
    rtvscand                  [running]
    smcd                      [stopped]
    =============================================================
    Drivers loaded:
    symap_custom_3_10_0_1062_1_2_el7_x86_64
    symev_custom_3_10_0_1062_1_2_el7_x86_64
    =============================================================
    Auto-Protect starting
    Protection status:
    Definition:     10/18/19 rev. 3
    AP:             Enabled
    =============================================================
    The log files for installation of Symantec Endpoint Protection for Linux are under ~/:
    sepfl-install.log
    sep-install.log
    sepap-install.log
    sepui-install.log
    sepfl-kbuild.log
    

    Am I missing something here? It doesn't really tell me why it will not start.

     



  • 2.  RE: Failed to start LSB: Symantec AntiVirus Scanner

    Posted Oct 19, 2019 12:30 AM

    Does it start if you run this cmd?

    /etc/init.d/smcd start

    symcfgd command fails to start services after issuing restart option

    https://support.symantec.com/us/en/article.tech246765.html



  • 3.  RE: Failed to start LSB: Symantec AntiVirus Scanner

    Posted Oct 21, 2019 10:43 AM

    Nope, I get:

    Starting smcd (via systemctl):  Job for smcd.service failed because the control process exited with error code. See "systemctl status smcd.service" and "journalctl -xe" for details.

    If I do systemctl status smcd.service I get:

    [root@servername ~]# systemctl status smcd.service
    ● smcd.service - LSB: Symantec AntiVirus Scanner
       Loaded: loaded (/etc/rc.d/init.d/smcd; bad; vendor preset: disabled)
       Active: failed (Result: exit-code) since Mon 2019-10-21 10:38:56 EDT; 2min 28s ago
         Docs: man:systemd-sysv-generator(8)
      Process: 16126 ExecStart=/etc/rc.d/init.d/smcd start (code=exited, status=1/FAILURE)
    
    Oct 21 10:36:55 afganyvision systemd[1]: Starting LSB: Symantec AntiVirus Scanner...
    Oct 21 10:36:55 afganyvision smcd[16167]: --- smcd started (pid 16167) ---
    Oct 21 10:36:55 afganyvision smcd[16167]: smcd running as daemon
    Oct 21 10:38:56 afganyvision smcd[16126]: [88B blob data]
    Oct 21 10:38:56 afganyvision systemd[1]: smcd.service: control process exited, code=exited status=1
    Oct 21 10:38:56 afganyvision systemd[1]: Failed to start LSB: Symantec AntiVirus Scanner.
    Oct 21 10:38:56 afganyvision systemd[1]: Unit smcd.service entered failed state.
    Oct 21 10:38:56 afganyvision systemd[1]: smcd.service failed.
    [root@servername ~]#
    

     



  • 4.  RE: Failed to start LSB: Symantec AntiVirus Scanner
    Best Answer

    Trusted Advisor
    Posted Oct 22, 2019 04:38 PM

    Have you verified that your kernal is supported?

    See https://support.symantec.com/us/en/article.info3983.html



  • 5.  RE: Failed to start LSB: Symantec AntiVirus Scanner

    Posted Oct 23, 2019 11:04 AM

    Okay that was the issue. I was trying to install 14.2.3335.1000 when I needed 14.2.4815.1101. The version naming convention isn't great