Endpoint Protection

I encountered this error message when I tried to login to my SEPM console.

I had tried to reset the admin password but still couldn't login.

The strange thing is that under Services, this SEPM service will stop itself regularly. When I manually start it again, it will stop itself soon after.

Has anyone encountered this error? How to do you overcome this error?

Please post the scm-server.log .
Because this error message is a very generic one.

\programs files\symantec\SEPM\tomcat\logs\scm-server.log, to be precise ;)

if it was working before then their could be port conflict

please follow the below steps and post the logs here

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007111308424148

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007100309555748

Rafeeq

Hi all, thanks for the help.

The log is shown as below:
2009-07-23 01:12:18.421 SEVERE: ================== Server Environment ===================
2009-07-23 01:12:18.421 SEVERE: os.name = Windows 2003
2009-07-23 01:12:18.421 SEVERE: os.version = 5.2
2009-07-23 01:12:18.421 SEVERE: os.arch = x86
2009-07-23 01:12:18.421 SEVERE: java.version = 1.5.0_15
2009-07-23 01:12:18.421 SEVERE: java.vendor = Sun Microsystems Inc.
2009-07-23 01:12:18.437 SEVERE: java.vm.name = Java HotSpot(TM) Server VM
2009-07-23 01:12:18.437 SEVERE: java.vm.version = 1.5.0_15-b04
2009-07-23 01:12:18.437 SEVERE: java.home = C:\Program Files\Symantec\Symantec Endpoint Protection Manager\jdk\jre
2009-07-23 01:12:18.437 SEVERE: catalina.home = C:\Program Files\Symantec\Symantec Endpoint Protection Manager\tomcat
2009-07-23 01:12:18.437 SEVERE: java.user = null
2009-07-23 01:12:18.437 SEVERE: user.language = en
2009-07-23 01:12:18.437 SEVERE: user.country = US
2009-07-23 01:12:18.437 SEVERE: scm.server.version = 11.0.3001.2224
2009-07-23 01:12:21.109 SEVERE: ================== StartClientTransport ===================
2009-07-23 01:12:21.187 SEVERE: Unknown Exception in: com.sygate.scm.server.servlet.StartupServlet
java.lang.Exception: HTTP 401 Unauthorized, URL: http://localhost:8014/secars/secars.dll?action=34
at com.sygate.scm.common.communicate.Communicator.getRequestInputStream(Communicator.java:555)
at com.sygate.scm.server.util.ClientTransportHelper.startClientTransport(ClientTransportHelper.java:72)
at com.sygate.scm.server.servlet.StartupServlet.init(StartupServlet.java:104)
at org.apache.catalina.core.StandardWrapper.loadServlet(StandardWrapper.java:880)
at org.apache.catalina.core.StandardWrapper.load(StandardWrapper.java:768)
at org.apache.catalina.core.StandardContext.loadOnStartup(StandardContext.java:3484)
at org.apache.catalina.core.StandardContext.start(StandardContext.java:3710)
at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1148)
at org.apache.catalina.core.StandardHost.start(StandardHost.java:697)
at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1148)
at org.apache.catalina.core.StandardEngine.start(StandardEngine.java:311)
at org.apache.catalina.core.StandardService.start(StandardService.java:450)
at org.apache.catalina.core.StandardServer.start(StandardServer.java:2213)
at org.apache.catalina.startup.Catalina.start(Catalina.java:484)
at org.apache.catalina.startup.Catalina.execute(Catalina.java:371)
at org.apache.catalina.startup.Catalina.process(Catalina.java:134)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:585)
at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:151)
com.sygate.scm.common.communicate.CommunicationException: Unexpected server error. ErrorCode: 0x10010000
at com.sygate.scm.common.communicate.Communicator.getRequestInputStream(Communicator.java:576)
at com.sygate.scm.server.util.ClientTransportHelper.startClientTransport(ClientTransportHelper.java:72)
at com.sygate.scm.server.servlet.StartupServlet.init(StartupServlet.java:104)
at org.apache.catalina.core.StandardWrapper.loadServlet(StandardWrapper.java:880)
at org.apache.catalina.core.StandardWrapper.load(StandardWrapper.java:768)
at org.apache.catalina.core.StandardContext.loadOnStartup(StandardContext.java:3484)
at org.apache.catalina.core.StandardContext.start(StandardContext.java:3710)
at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1148)
at org.apache.catalina.core.StandardHost.start(StandardHost.java:697)
at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1148)
at org.apache.catalina.core.StandardEngine.start(StandardEngine.java:311)
at org.apache.catalina.core.StandardService.start(StandardService.java:450)
at org.apache.catalina.core.StandardServer.start(StandardServer.java:2213)
at org.apache.catalina.startup.Catalina.start(Catalina.java:484)
at org.apache.catalina.startup.Catalina.execute(Catalina.java:371)
at org.apache.catalina.startup.Catalina.process(Catalina.java:134)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:585)
at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:151)

It is working fine until a few days ago when this error occurred.

Appreciate all help and support give, thank you.

Hi,

its complaining about a permission issue.

try this but its not  a solution okay

Go to SEPM FOLDER
right click on that folder
click on properties
click on security
click on add
add "authenticated users group"
click on advanced
uncheck the first option " inherit permission from parent"
click copy
and replace the permissions
click on apply and click on okay
now try starting service from services.msc

hope this works
 

 

forgot to mention

Try this first
Go to IIS
right click on symantec web server
click on properties
click on directory security
select authentication and access control click on edit
in that check the option
integrated windows authentication option
click on apply click on okay
start the service and hope full you should be able to log in

you may try these steps, provided the IIS logs to show this information


W3SVC2 127.0.0.1 GET /secars/secars.dll action=34 80 - 127.0.0.1 Java/1.5.0_14 401 1 0



http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2008101518485148

Try this document

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2009031114274948

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2008101518485148

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2008101518485148

This might help

Hi all,

Thanks for the prompt response.

I had followed Rafeeq's suggestion to edit in IIS to check the option, integrated windows authentication option.

I'm able to login now except that it asks me for the SEP Installation CD as it is trying to installing something.

Quite strange on this suggestion as the default option of allowing anonymous access should be sufficient to allow access to the SEPM console which it is working fine on my other SEP servers.

Hi happy that it working

this could be the problem

, in IIS we have 2 types of authentication, one is anonymous and the next one is integrated followed by other 3 options

before you checked anonymous and sepm service was not starting( was by default)

but when you checked integrated it started authenticating

this means anonymous is not working

by enabling the integrated option service would start and everything would work fine, however if you get reporting component error or clients not able to communicate, if you ever come such problem
reset the IUSR password, please let me know if you have any issues

The SEPM Services has been stop right?

Try to resolve this by reinstalling the IIS then log on to SEPM or try the link below

http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/7d89841df17545a6ca2574490004775a?OpenDocument

http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/9cbf7cd0fbe4945388257384004c8968?OpenDocument

http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/aedb5043404f4521882574eb00333fcf?OpenDocument

Looks like Rafeeq's comment helped in solving the issue hence marking his comment as solution..