Endpoint Protection

Hi everebody,

Symantec Endpoint Protection Manager service is always stop.
Event id 4096 Error: The Java Virtual Machine has exited with a code of -1, the service is being stopped.
How do I solve this problem?

Pls paste the scm-server-0.log with is present in Program Files \Symantec\Symantec Endpoint Protection Manager\tomcat\logs  here

2009-10-24 10:36:14.296 SEVERE: ================== Server Environment ===================
2009-10-24 10:36:14.312 SEVERE: os.name = Windows 2003
2009-10-24 10:36:14.312 SEVERE: os.version = 5.2
2009-10-24 10:36:14.312 SEVERE: os.arch = x86
2009-10-24 10:36:14.312 SEVERE: java.version = 1.5.0_15
2009-10-24 10:36:14.312 SEVERE: java.vendor = Sun Microsystems Inc.
2009-10-24 10:36:14.312 SEVERE: java.vm.name = Java HotSpot(TM) Server VM
2009-10-24 10:36:14.312 SEVERE: java.vm.version = 1.5.0_15-b04
2009-10-24 10:36:14.312 SEVERE: java.home = C:\Program Files\Symantec\Symantec Endpoint Protection Manager\jdk\jre
2009-10-24 10:36:14.312 SEVERE: catalina.home = C:\Program Files\Symantec\Symantec Endpoint Protection Manager\tomcat
2009-10-24 10:36:14.312 SEVERE: java.user = null
2009-10-24 10:36:14.312 SEVERE: user.language = en
2009-10-24 10:36:14.328 SEVERE: user.country = US
2009-10-24 10:36:14.328 SEVERE: scm.server.version = 11.0.4000.2295
2009-10-24 10:36:19.687 SEVERE: ================== StartClientTransport ===================
2009-10-24 10:36:19.937 SEVERE: Unknown Exception in: com.sygate.scm.server.servlet.StartupServlet
java.lang.Exception: HTTP 401 Unauthorized, URL: http://localhost:8014/secars/secars.dll?action=34
 at com.sygate.scm.common.communicate.Communicator.getRequestInputStream(Communicator.java:556)
 at com.sygate.scm.server.util.ClientTransportHelper.startClientTransport(ClientTransportHelper.java:72)
 at com.sygate.scm.server.servlet.StartupServlet.init(StartupServlet.java:104)
 at org.apache.catalina.core.StandardWrapper.loadServlet(StandardWrapper.java:880)
 at org.apache.catalina.core.StandardWrapper.load(StandardWrapper.java:768)
 at org.apache.catalina.core.StandardContext.loadOnStartup(StandardContext.java:3484)
 at org.apache.catalina.core.StandardContext.start(StandardContext.java:3710)
 at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1148)
 at org.apache.catalina.core.StandardHost.start(StandardHost.java:697)
 at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1148)
 at org.apache.catalina.core.StandardEngine.start(StandardEngine.java:311)
 at org.apache.catalina.core.StandardService.start(StandardService.java:450)
 at org.apache.catalina.core.StandardServer.start(StandardServer.java:2213)
 at org.apache.catalina.startup.Catalina.start(Catalina.java:484)
 at org.apache.catalina.startup.Catalina.execute(Catalina.java:371)
 at org.apache.catalina.startup.Catalina.process(Catalina.java:134)
 at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
 at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
 at java.lang.reflect.Method.invoke(Method.java:585)
 at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:151)
com.sygate.scm.common.communicate.CommunicationException: Unexpected server error. ErrorCode: 0x10010000
 at com.sygate.scm.common.communicate.Communicator.getRequestInputStream(Communicator.java:580)
 at com.sygate.scm.server.util.ClientTransportHelper.startClientTransport(ClientTransportHelper.java:72)
 at com.sygate.scm.server.servlet.StartupServlet.init(StartupServlet.java:104)
 at org.apache.catalina.core.StandardWrapper.loadServlet(StandardWrapper.java:880)
 at org.apache.catalina.core.StandardWrapper.load(StandardWrapper.java:768)
 at org.apache.catalina.core.StandardContext.loadOnStartup(StandardContext.java:3484)
 at org.apache.catalina.core.StandardContext.start(StandardContext.java:3710)
 at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1148)
 at org.apache.catalina.core.StandardHost.start(StandardHost.java:697)
 at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1148)
 at org.apache.catalina.core.StandardEngine.start(StandardEngine.java:311)
 at org.apache.catalina.core.StandardService.start(StandardService.java:450)
 at org.apache.catalina.core.StandardServer.start(StandardServer.java:2213)
 at org.apache.catalina.startup.Catalina.start(Catalina.java:484)
 at org.apache.catalina.startup.Catalina.execute(Catalina.java:371)
 at org.apache.catalina.startup.Catalina.process(Catalina.java:134)
 at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
 at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
 at java.lang.reflect.Method.invoke(Method.java:585)
 at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:151)

From your logs "java.lang.Exception: HTTP 401 Unauthorized, URL: http://localhost:8014/secars/secars.dll?action=34" ,means there is some permission or password issue with IUSR account. Reset the password and enter in iis manager and try .Refer the below doc also
"Java -1" error in event log and the error "Failed to connect to server" at login, with HTTP 401 in scm-server-0.log, HTTP 401 1 0 in IIS Logs
http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2008101518485148 

Java -1 is very generic error happens mainly because of port conflicts and permissions.
There can 100 reason for java -1.Pls check the scm-server-0.log for related error.

For debugging sepm
http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007090612034148

Also check these
"Java -1" error in event log and the error "Failed to connect to server" at login, with HTTP 401 in scm-server-0.log, HTTP 401 1 0 in IIS Logs
http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/d947c52b7da1384a652574e30049221e?OpenDocument

Symantec Endpoint Protection Manager service stops with a Java -1 error in the event log
http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/86368136366e1ad78025734e004734d9?OpenDocument

Event ID 4096 - "Java -1" error in event log and the error "Failed to connect to server" at login, with HTTP 503 in scm-server-0.log on a Windows 2008 Small Business Server 64-bit Edition
http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/0bd5121b20ac1258652575ec0062f4d6?OpenDocument

If it is a 64 bit server then you might need to change your iis to 64 bit mode
Java -1 Errors and HTTP 500 errors when connecting to the Symantec Endpoint Protection Manager on a Windows Server 2003 64 bit
http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/387a93f58eb98c39882573ed007b50f3?OpenDocument

 

Http 400 error

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2008041811532648

https://www-secure.symantec.com/connect/articles/error-logging-sepm-failed-connect-server-java-1-error-http-400-bad-request-0

 

If the above link is not accessible
Try this

http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/d947c52b7da1384a652574e30049221e?OpenDocument