Data Center Security

Hello everybody,

we try to install the CSP-Client in Version 6.5.1.262 on a Windows XP SP3 machine but it always fails. We cleaned temp folders, checked that short naming is enabled etc. but nothing really helps. We just performed all steps mentioned in this two articles:

https://support.symantec.com/en_US/article.TECH211011.html

https://www.symantec.com/connect/articles/understanding-error-1603-fatal-error-during-installation

I have attached the install.log, please help. Here is an excerpt where we think the error comes from:

InstallShield 11:55:28: ProductCode is {6E0310C0-D6D6-4CDA-AC06-17CBFD7C09D7}
InstallShield 11:55:28: Initializing Engine
InstallShield 11:55:29: Done Initializing...
InstallShield 11:55:29: Registering Msi Server...
InstallShield 11:55:29: Invoking script function InstallServices
1: *** ***************************************************************************** 
1: *** InstallServices() -> begin. 
1: Error getting deferred property "SERVICE_PW" 
1: *** InstallServices() -> end. 
1: *** ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 
InstallShield 11:55:32: Returning script function result
InstallShield 11:55:32: CallScriptFunctionFromMsiCA() ends, result 0x0
InstallShield 11:55:33: Cleaning up temp file C:\Temp\{1E308D3B-BA23-4351-A0D3-5ECAE2CB409A}\ISRT.dll
InstallShield 11:55:33: Cleaning up temp file C:\Temp\{1E308D3B-BA23-4351-A0D3-5ECAE2CB409A}\IsConfig.ini
InstallShield 11:55:33: Cleaning up temp file C:\Temp\{1E308D3B-BA23-4351-A0D3-5ECAE2CB409A}\String1033.txt
InstallShield 11:55:33: Cleaning up temp file C:\Temp\{1E308D3B-BA23-4351-A0D3-5ECAE2CB409A}\_isres_0x0409.dll
InstallShield 11:55:33: Cleaning up temp file C:\Temp\{1E308D3B-BA23-4351-A0D3-5ECAE2CB409A}\setup.inx
MSI (s) (A8:54) [11:55:33:106]: Executing op: ActionStart(Name=efainst_install_rollback.C1599C28_9DB3_446E_AC61_80DD180FF696,Description=Unregistering from SymEFA.,)
MSI (s) (A8:54) [11:55:33:106]: Executing op: CustomActionSchedule(Action=efainst_install_rollback.C1599C28_9DB3_446E_AC61_80DD180FF696,ActionType=3329,Source=BinaryData,Target=EFAUninstall,CustomActionData="C:\Program Files\Symantec\Symantec Embedded Security\Agent\IPS\bin\EFAInst.exe" "SYMEFA-CSP" /uninstall /KeepDriverRunning)
MSI (s) (A8:54) [11:55:33:116]: Executing op: ActionStart(Name=efainst_install.C1599C28_9DB3_446E_AC61_80DD180FF696,Description=Registering with SymEFA.,)
MSI (s) (A8:54) [11:55:33:126]: Executing op: CustomActionSchedule(Action=efainst_install.C1599C28_9DB3_446E_AC61_80DD180FF696,ActionType=3073,Source=BinaryData,Target=EFAInstall,CustomActionData="C:\Program Files\Symantec\Symantec Embedded Security\Agent\IPS\bin\EFAInst.exe" "SYMEFA-CSP" /install /KeepDriverRunning)
MSI (s) (A8:84) [11:55:33:146]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSIE8.tmp, Entrypoint: EFAInstall
EFAINST_TRACE [11:55:33:186]: --> Starting ValidateCurrentProcess...
EFAINST_TRACE [11:55:33:196]: ValidateCurrentProcess (86) - Initializing verify trust...
EFAINST_TRACE [11:55:33:196]: ValidateCurrentProcess (103) - Get current process info...
EFAINST_TRACE [11:55:33:196]: ValidateCurrentProcess (107) - Check process path...
EFAINST_TRACE [11:55:33:196]: ValidateCurrentProcess (127) - Validate process path...
EFAINST_TRACE [11:55:33:376]: ValidateCurrentProcess (132) - Verify couldn't successfully validate process id: 2040 for 4 signature.  ccVTErrorType = 3
EFAINST_TRACE [11:55:33:376]: <-- ValidateCurrentProcess ended
Action ended 11:55:33: InstallExecute. Return value 3.

Attachment(s)

install_fail.txt   625 KB 1 version

Do you have SEP installed on the machine?

If yes, can you uninstall SEP, install SCSP & then install SEP?

Hi Julien,

For XP SP2-SP3 you'll need to use version 6.0 of the agent which can be found in the legacy_dist folder in the DCS Server Advanced directory.

agent-win7_all-winxp_sp2_sp3-winxp_embedded_sp3.exe

Please mark as SOLVED if this works for you.

Thanks!

Hi,

thanks for the answers.

@pete: We tested with a client  XP – SP3, SEP 11.0.6200.754. We cleanwiped the whole SEP-Installation and then tried to install the CSP-Client --> Rollback after displaying something like "symefa". We wanted to extract the install-log, but it doesn't get created in the folder we specify during the install-wizard..

@shane: We use Version 6.5.1 for other Xp2 and Xp3 clients and they are working without any problem, so it should work at the problematic clients as welll. So i think this is not the problem, or is there something i dont know about?

Kind regards,

Julien

I always go by the Platform Feature Matrix included in the docs folder. For version 6.5.1 in the XP section it states that support is frozen at DCS version 6.0 MP1.

You may be dealing with another issue but that's the first thing I noticed:

The log file you are looking for is: SISAgentSetup.log

Before closing out the wizard when it fails to install do a file search for this name. Copy it somewhere else to take a look at it. Go ahead and attach it to this post so we can take a look.

-Shane

I thought it was DCS agent! CSP Embedded is the product name yoou are using just so we're clear.

Yes SES:CSP 6.5.1 is supported on XP SP2-3

I don't really see anything in the log you posted that indicates what's happening.

• What is the exact version of XP we're talking about? Professional or Embedded?
• Is Windows Installer version 3.1 installed?
• What does your install string look like?
• Have you tried an interactive installation not at the command-line?

Hi Shane,

thanks for your ansers. Sorry i am not familiar with all the symantec products :P We are using: Symantec embedded security: Critical system Protection manager 6.5.1.262

• What is the exact version of XP we're talking about? Professional or Embedded?

Its professional

• Is Windows Installer version 3.1 installed?

I will check this

• What does your install string look like?

we use no install string, we use the wizard. Client shall be in managed mode

• Have you tried an interactive installation not at the command-line?

yeah we are doing it this way all the time

We are in contact with our symantec-distributor and symantec development as well. They think something is wrong with the "Filter manager" or some kind of symefa library. We will do some checks soon and i will update you then.

Kind regards,

Julien

Hi,

i just performed some checks. Here the results:

Windows ® Installer. V 4.5.6001.22159 

Filtermanager:

C:\Documents and Settings\Administrator>sc query fltmgr

SERVICE_NAME: fltmgr
        TYPE               : 2  FILE_SYSTEM_DRIVER
        STATE              : 4  RUNNING
                                (STOPPABLE,NOT_PAUSABLE,IGNORES_SHUTDOWN)
        WIN32_EXIT_CODE    : 0  (0x0)
        SERVICE_EXIT_CODE  : 0  (0x0)
        CHECKPOINT         : 0x0
        WAIT_HINT          : 0x0

I hope to hear from you. Have a nice weekend everyone,

Julien

I'd go ahead and open a support case with Symantec.

If you feel like testing the latest 6.5 MP1 DCS agent (Hotfix 8). agent_6.5.0.493.exe

You can find it here:  https://support.symantec.com/en_US/article.INFO3750.html

It will work with SES:CSP fine. Just to see if it works...

If it were me then I'd test a 5.2.9 agent. If the 5.2.9 agent works then you know it has something to do with new features in 6.x.