Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos Failing to Install

I'm installing on a HP Probook with Windows 10. We've purchased this model several times and Sophos generally installs without issue. On this particular laptop the installation is failing.

Attached is the log. I believe the key part of the log is:

2022-04-27T18:57:02.1379892Z ERROR : Error: No reachable update service locations
2022-04-27T18:57:02.1379892Z ERROR : DownloadCommand::onRun() failed with std::exception: SDDS3 sync failed
2022-04-27T18:57:02.1379892Z INFO : Command 'Download' completed with failure with reboot code '0' and error message 'Could not download software'.
2022-04-27T18:57:02.1379892Z ERROR : Installation failed.


I'm not sure what the next steps are. 


 

Started C:\Users\admin\AppData\Local\Temp\sfl-2865c000\Setup.exe
2022-04-27T18:56:15.7034812Z INFO : Stage 1 command-line options:
2022-04-27T18:56:15.7034812Z INFO : ---
2022-04-27T18:56:15.7034812Z INFO : Quiet mode on: 0
2022-04-27T18:56:15.7034812Z INFO : Automatic Proxy detection disabled: 0
2022-04-27T18:56:15.7034812Z INFO : No feedback mode on: 0
2022-04-27T18:56:15.7034812Z INFO : Dump feedback enabled: 0
2022-04-27T18:56:15.7034812Z INFO : Bypass competitor removal: 0
2022-04-27T18:56:15.7034812Z INFO : Using CRT catalog file path: --
2022-04-27T18:56:15.7034812Z INFO : Only register endpoint with Central: 0
2022-04-27T18:56:15.7034812Z INFO : Log messages between endpoint and Central: 0
2022-04-27T18:56:15.7034812Z INFO : Log command-line passed to executables: 0
2022-04-27T18:56:15.7034812Z INFO : Using custom server that hosts the installer stage2 filename : --
2022-04-27T18:56:15.7034812Z INFO : Using cloud group: --
2022-04-27T18:56:15.7192073Z INFO : Overriding computer name: --
2022-04-27T18:56:15.7192073Z INFO : Overriding computer description: --
2022-04-27T18:56:15.7192073Z INFO : Overriding domain name: --
2022-04-27T18:56:15.7192073Z INFO : Language will be set to: --
2022-04-27T18:56:15.7192073Z INFO : Using message relays: --
2022-04-27T18:56:15.7192073Z INFO : Proxy address: --
2022-04-27T18:56:15.7192073Z INFO : Proxy user name: --
2022-04-27T18:56:15.7192073Z INFO : Using custom customer token: --
2022-04-27T18:56:15.7192073Z INFO : Using specified products: --
2022-04-27T18:56:15.7192073Z INFO : Using certificates from the MCS app data folder.: 0
2022-04-27T18:56:15.7192073Z INFO : Using custom customer ID.: --
2022-04-27T18:56:15.7192073Z INFO : Using specified user ID.: --
2022-04-27T18:56:15.7192073Z INFO : Using local install source.: --
2022-04-27T18:56:15.7192073Z INFO : Using experimental SRV.: --
2022-04-27T18:56:15.7192073Z INFO : Invoked as part of SEC migration.: 0
2022-04-27T18:56:15.7192073Z INFO : ---
2022-04-27T18:56:15.7192073Z INFO : Sending HTTP 'POST' request to: api/download/stage2-details/9a9e484c-37ae-4479-bf49-9364e1bf3625
2022-04-27T18:56:15.7363854Z WARNING : WinHttpGetProxyForUrl returned: 12180
2022-04-27T18:56:15.7363854Z INFO : Attempting to connect using proxy '' of type 'Empty Proxy'.
2022-04-27T18:56:15.7363854Z INFO : Set security protocol: 00000800
2022-04-27T18:56:15.7363854Z INFO : Opening connection to api-cloudstation-us-east-2.prod.hydra.sophos.com
2022-04-27T18:56:15.7363854Z INFO : Request content size: 30
2022-04-27T18:56:15.9242255Z INFO : Sending request
2022-04-27T18:56:15.9242255Z INFO : Request sent
2022-04-27T18:56:15.9710392Z INFO : Sending request
2022-04-27T18:56:15.9710392Z INFO : Request sent
2022-04-27T18:56:15.9710392Z INFO : Response status code: 200
2022-04-27T18:56:15.9710392Z INFO : Response data size: 176
2022-04-27T18:56:15.9710392Z INFO : trySendRequestThroughPotentialProxy returning response with status code: 200
2022-04-27T18:56:15.9710392Z INFO : Parsing message received for Stage 2 filename: '{"mcs_server":"mcs2-cloudstation-us-east-2.prod.hydra.sophos.com","stage2_filename":"stage2-1.13.270.0-c9eb102636db992ba3fd0e2de61b8532e1bfe03dc89ae5422bbb46d8cb22e34a.tar.gz"}'
2022-04-27T18:56:15.9710392Z INFO : Sending HTTP 'GET' request to: full/central/windows/business/installer/stage2-1.13.270.0-c9eb102636db992ba3fd0e2de61b8532e1bfe03dc89ae5422bbb46d8cb22e34a.tar.gz
2022-04-27T18:56:15.9866664Z WARNING : WinHttpGetProxyForUrl returned: 12180
2022-04-27T18:56:15.9866664Z INFO : Attempting to connect using proxy '' of type 'Empty Proxy'.
2022-04-27T18:56:15.9866664Z INFO : Set security protocol: 00000800
2022-04-27T18:56:15.9866664Z INFO : Opening connection to downloads.sophos.com
2022-04-27T18:56:15.9866664Z INFO : Request content size: 0
2022-04-27T18:56:16.1054001Z INFO : Sending request
2022-04-27T18:56:16.1054001Z INFO : Request sent
2022-04-27T18:56:17.0400031Z INFO : Response status code: 200
2022-04-27T18:56:17.0400031Z INFO : Response data size: 3309155
2022-04-27T18:56:17.0400031Z INFO : trySendRequestThroughPotentialProxy returning response with status code: 200
2022-04-27T18:56:17.0400031Z INFO : Extracting files:
2022-04-27T18:56:17.0400031Z INFO : integrity.dat
2022-04-27T18:56:17.0660572Z INFO : manifest.dat
2022-04-27T18:56:17.0817776Z INFO : scf.dat
2022-04-27T18:56:17.0817776Z INFO : SDDS3.dll
2022-04-27T18:56:17.1129426Z INFO : sof.dat
2022-04-27T18:56:17.1129426Z INFO : SophosSetup_Stage2.exe
2022-04-27T18:56:17.2692723Z INFO : su-setup32.exe
2022-04-27T18:56:17.3160654Z INFO : su-setup64.exe
2022-04-27T18:56:17.3629919Z INFO : SUL.dll
2022-04-27T18:56:17.4098960Z INFO : Management Certs/sophosca1.crl
2022-04-27T18:56:17.4098960Z INFO : Management Certs/sophosca1.crt
2022-04-27T18:56:17.4255332Z INFO : Management Certs/sophosca2.crl
2022-04-27T18:56:17.4255332Z INFO : Management Certs/sophosca2.crt
2022-04-27T18:56:17.4255332Z INFO : Management Certs/sophosca3.crl
2022-04-27T18:56:17.4255332Z INFO : Management Certs/sophosca3.crt
2022-04-27T18:56:17.4255332Z INFO : Management Certs/sophosca4.crl
2022-04-27T18:56:17.4255332Z INFO : Management Certs/sophosca4.crt
2022-04-27T18:56:17.4255332Z INFO : ManifestCerts/rootca.crl
2022-04-27T18:56:17.4255332Z INFO : ManifestCerts/rootca.crt
2022-04-27T18:56:17.4255332Z INFO : ManifestCerts/rootca384.crl
2022-04-27T18:56:17.4410768Z INFO : ManifestCerts/rootca384.crt
2022-04-27T18:56:17.4410768Z INFO : Checking manifest:C:\\Program Files (x86)\\Sophos\\CloudInstaller\\extract_cache\\manifest.dat
2022-04-27T18:56:17.4723959Z INFO : Running setup.
Started C:\Program Files (x86)\Sophos\CloudInstaller\SophosSetup_Stage2.exe
2022-04-27T18:56:17.6185598Z INFO : Stage 2 command-line options:
2022-04-27T18:56:17.6185598Z INFO : ---
2022-04-27T18:56:17.6185598Z INFO : Parent PID: 9540
2022-04-27T18:56:17.6185598Z INFO : Server: mcs2-cloudstation-us-east-2.prod.hydra.sophos.com
2022-04-27T18:56:17.6185598Z INFO : Message relays: --
2022-04-27T18:56:17.6185598Z INFO : Suppressing feedback: 0
2022-04-27T18:56:17.6185598Z INFO : Dump feedback to disk: 0
2022-04-27T18:56:17.6185598Z INFO : Register only: 0
2022-04-27T18:56:17.6185598Z INFO : Trail logging: 0
2022-04-27T18:56:17.6185598Z INFO : Command-line logging: 0
2022-04-27T18:56:17.6185598Z INFO : Bypassing competitor removal: 0
2022-04-27T18:56:17.6185598Z INFO : CRT catalog: --
2022-04-27T18:56:17.6185598Z INFO : Language: --
2022-04-27T18:56:17.6185598Z INFO : Log files: C:\\ProgramData\\Sophos\\CloudInstaller\\Logs\\SophosCloudInstaller_20220427_185615.log
2022-04-27T18:56:17.6185598Z INFO : Group: --
2022-04-27T18:56:17.6185598Z INFO : Quiet: 0
2022-04-27T18:56:17.6185598Z INFO : Virtual appliance: 0
2022-04-27T18:56:17.6185598Z INFO : Proxy address: --
2022-04-27T18:56:17.6185598Z INFO : Proxy user: --
2022-04-27T18:56:17.6185598Z INFO : Overriding computer name: --
2022-04-27T18:56:17.6185598Z INFO : Overriding computer description: --
2022-04-27T18:56:17.6185598Z INFO : Overriding domain: --
2022-04-27T18:56:17.6185598Z INFO : Disable proxy detection: 0
2022-04-27T18:56:17.6185598Z INFO : Customer Token Specified: 9a9e484c-37ae-4479-bf49-9364e1bf3625
2022-04-27T18:56:17.6185598Z INFO : Products: all
2022-04-27T18:56:17.6185598Z INFO : Pipe write handle: 2024
2022-04-27T18:56:17.6185598Z INFO : MCS Certificates Folder: 0
2022-04-27T18:56:17.6185598Z INFO : MCS Customer Id: b6ad86d4-3b8e-e4ec-c914-3165b6744bc4
2022-04-27T18:56:17.6185598Z INFO : User Id: --
2022-04-27T18:56:17.6185598Z INFO : Local install source: --
2022-04-27T18:56:17.6185598Z INFO : Name of SRV domain: --
2022-04-27T18:56:17.6185598Z INFO : Partner Id: --
2022-04-27T18:56:17.6185598Z INFO : Customer Estate Id: --
2022-04-27T18:56:17.6185598Z INFO : Invoked as part of SEC migration: 0
2022-04-27T18:56:17.6185598Z INFO : ---
2022-04-27T18:56:17.6355990Z INFO : User name: admin
2022-04-27T18:56:17.6355990Z INFO : GetUserNameEx/NameDnsDomain: The user name is not available in the specified format. Assuming non-Domain computer.
2022-04-27T18:56:17.6381833Z INFO : User profile loaded
2022-04-27T18:56:17.6381833Z INFO : Model::server value changed to: mcs2-cloudstation-us-east-2.prod.hydra.sophos.com
2022-04-27T18:56:17.6381833Z INFO : Model::messageRelays value changed to be size: 0
2022-04-27T18:56:17.6381833Z INFO : Model::group value changed to: 
2022-04-27T18:56:17.6381833Z INFO : Model::parentPid value changed to: 9540
2022-04-27T18:56:17.6381833Z INFO : Model::products changed to: all
2022-04-27T18:56:17.6381833Z INFO : Model::customer token value changed to: 9a9e484c-37ae-4479-bf49-9364e1bf3625
2022-04-27T18:56:17.6381833Z INFO : MCS Crts: C:\\Program Files (x86)\\Sophos\\CloudInstaller\\Management Certs\\sophosca1.crt,C:\\Program Files (x86)\\Sophos\\CloudInstaller\\Management Certs\\sophosca2.crt,C:\\Program Files (x86)\\Sophos\\CloudInstaller\\Management Certs\\sophosca3.crt,C:\\Program Files (x86)\\Sophos\\CloudInstaller\\Management Certs\\sophosca4.crt
2022-04-27T18:56:17.6381833Z INFO : MCS CRLs: C:\\Program Files (x86)\\Sophos\\CloudInstaller\\Management Certs\\sophosca1.crl,C:\\Program Files (x86)\\Sophos\\CloudInstaller\\Management Certs\\sophosca2.crl,C:\\Program Files (x86)\\Sophos\\CloudInstaller\\Management Certs\\sophosca3.crl,C:\\Program Files (x86)\\Sophos\\CloudInstaller\\Management Certs\\sophosca4.crl
2022-04-27T18:56:17.6381833Z INFO : Model:: MCS customer id value changed to: b6ad86d4-3b8e-e4ec-c914-3165b6744bc4
2022-04-27T18:56:17.6381833Z INFO : Sophos Endpoint Defense is not installed
2022-04-27T18:56:17.6381833Z INFO : Not tamper-protected by SED
2022-04-27T18:56:17.6381833Z INFO : detectedMsiInstalledMcs.installed: 0
2022-04-27T18:56:17.6381833Z INFO : Not migrating from SEC endpoint.
2022-04-27T18:56:17.6381833Z INFO : Beginning command definition.
2022-04-27T18:56:17.6381833Z INFO : Adding command to remove Sophos 'Image File Execution Options' keys.
2022-04-27T18:56:17.6381833Z INFO : Adding command to wait for SAU update to complete.
2022-04-27T18:56:17.6381833Z INFO : Adding competitor detection command.
2022-04-27T18:56:17.6381833Z INFO : Adding command to register with Sophos cloud.
2022-04-27T18:56:17.6381833Z INFO : Adding command to download product suite.
2022-04-27T18:56:17.6381833Z INFO : Adding command to uninstall existing products.
2022-04-27T18:56:17.6381833Z INFO : Adding command to remove existing installation of Sophos AutoUpdate
2022-04-27T18:56:17.6381833Z INFO : Adding command to allow tamper protected reinstalls.
2022-04-27T18:56:17.6381833Z INFO : Adding commands to uninstall remaining existing products.
2022-04-27T18:56:17.6381833Z INFO : Adding command to remove existing installation of Sophos System Protection
2022-04-27T18:56:17.6381833Z INFO : Adding command to remove existing installation of Sophos Heartbeat
2022-04-27T18:56:17.6381833Z INFO : Adding command to remove existing installation of Sophos Network Access Control
2022-04-27T18:56:17.6381833Z INFO : Adding command to remove existing installation of Sophos Client Firewall
2022-04-27T18:56:17.6381833Z INFO : Adding command to remove existing installation of Sophos Patch
2022-04-27T18:56:17.6381833Z INFO : Adding command to remove existing installation of Sophos Clean
2022-04-27T18:56:17.6381833Z INFO : Adding command to retrieve policy.
2022-04-27T18:56:17.6381833Z INFO : Adding command to prepare for installation.
2022-04-27T18:56:17.6381833Z INFO : Adding command to install Sophos agent.
2022-04-27T18:56:17.6381833Z INFO : Command definition complete.
2022-04-27T18:56:17.6381833Z INFO : Stage 1 version:1.9.100.0
2022-04-27T18:56:17.6381833Z INFO : Stage 2 version:1.13.270.0
2022-04-27T18:56:17.6381833Z INFO : OS version: 10.0.19042.
2022-04-27T18:56:17.6381833Z INFO : Service pack: 0.0.
2022-04-27T18:56:17.6381833Z INFO : System Language: 1033.
2022-04-27T18:56:17.6381833Z INFO : User Language: 1033.
2022-04-27T18:56:17.6381833Z INFO : 64 bit: yes.
2022-04-27T18:56:17.6381833Z INFO : FindMainWindow: pid=9540
2022-04-27T18:56:17.6381833Z INFO : Window is main control window of process
2022-04-27T18:56:17.6381833Z INFO : ::EnumWindows stopped early; window found
2022-04-27T18:56:17.6381833Z INFO : _bestHandle=00090388
2022-04-27T18:56:18.0019947Z INFO : Running System Property Check: VerifyTrust ...
2022-04-27T18:56:18.0175331Z INFO : System Property Check: VerifyTrust - PASSED
2022-04-27T18:56:18.0801565Z INFO : Running System Property Check: HostnameLength ...
2022-04-27T18:56:18.0801565Z INFO : Initialized Winsock subsystem
2022-04-27T18:56:18.0801565Z INFO : Valid hostname length
2022-04-27T18:56:18.0801565Z INFO : System Property Check: HostnameLength - PASSED
2022-04-27T18:56:18.1521099Z INFO : Running System Property Check: GroupNameLength ...
2022-04-27T18:56:18.1521099Z INFO : System Property Check: GroupNameLength - PASSED
2022-04-27T18:56:18.2146819Z INFO : Running System Property Check: IsAdministrator ...
2022-04-27T18:56:18.2146819Z INFO : System Property Check: IsAdministrator - PASSED
2022-04-27T18:56:18.2771657Z INFO : Running System Property Check: JunctionPointsCheck ...
2022-04-27T18:56:18.2771657Z INFO : Scanned 78 Sophos paths for junction points
2022-04-27T18:56:18.2771657Z INFO : System Property Check: JunctionPointsCheck - PASSED
2022-04-27T18:56:18.3402190Z INFO : Running System Property Check: PendingReboots ...
2022-04-27T18:56:18.3412689Z INFO : System Property Check: PendingReboots - PASSED
2022-04-27T18:56:18.4038399Z INFO : Running System Property Check: PrimaryDriveSpace ...
2022-04-27T18:56:18.4038399Z INFO : Enough space: 204373 Mb
2022-04-27T18:56:18.4038399Z INFO : System Property Check: PrimaryDriveSpace - PASSED
2022-04-27T18:56:18.4663501Z INFO : Running System Property Check: MsXml ...
2022-04-27T18:56:18.4663501Z INFO : System Property Check: MsXml - PASSED
2022-04-27T18:56:18.5288315Z INFO : Running System Property Check: NotFirewall ...
2022-04-27T18:56:18.5288315Z INFO : System Property Check: NotFirewall - PASSED
2022-04-27T18:56:18.5912841Z INFO : Running System Property Check: NotHitmanProAlertIncompatible ...
2022-04-27T18:56:18.5912841Z INFO : No HitmanPro.Alert Installed
2022-04-27T18:56:18.5912841Z INFO : System Property Check: NotHitmanProAlertIncompatible - PASSED
2022-04-27T18:56:18.6537870Z INFO : Running System Property Check: NotInvincea ...
2022-04-27T18:56:18.6537870Z INFO : System Property Check: NotInvincea - PASSED
2022-04-27T18:56:18.7162817Z INFO : Running System Property Check: NotMessageRelay ...
2022-04-27T18:56:18.7162817Z INFO : RMS is not installed on the endpoint
2022-04-27T18:56:18.7162817Z INFO : System Property Check: NotMessageRelay - PASSED
2022-04-27T18:56:18.7788503Z INFO : Running System Property Check: NotNac ...
2022-04-27T18:56:18.7788503Z INFO : System Property Check: NotNac - PASSED
2022-04-27T18:56:18.8413738Z INFO : Running System Property Check: NotPatch ...
2022-04-27T18:56:18.8413738Z INFO : System Property Check: NotPatch - PASSED
2022-04-27T18:56:18.9039267Z INFO : Running System Property Check: NotPureMessageDomino ...
2022-04-27T18:56:18.9039267Z INFO : System Property Check: NotPureMessageDomino - PASSED
2022-04-27T18:56:18.9663981Z INFO : Running System Property Check: NotPureMessageExchangeWithAntiSpam ...
2022-04-27T18:56:18.9663981Z INFO : System Property Check: NotPureMessageExchangeWithAntiSpam - PASSED
2022-04-27T18:56:19.0289140Z INFO : Running System Property Check: NotSharePoint ...
2022-04-27T18:56:19.0289140Z INFO : System Property Check: NotSharePoint - PASSED
2022-04-27T18:56:19.0914030Z INFO : Running System Property Check: NotSecServer ...
2022-04-27T18:56:19.0914030Z INFO : System Property Check: NotSecServer - PASSED
2022-04-27T18:56:19.1538993Z INFO : Running System Property Check: NotSum ...
2022-04-27T18:56:19.1538993Z INFO : System Property Check: NotSum - PASSED
2022-04-27T18:56:19.2163996Z INFO : Running System Property Check: NotBlockedByTamperProtection ...
2022-04-27T18:56:19.2163996Z INFO : Not tamper protected
2022-04-27T18:56:19.2163996Z INFO : System Property Check: NotBlockedByTamperProtection - PASSED
2022-04-27T18:56:19.2789090Z INFO : Running System Property Check: RAMSize ...
2022-04-27T18:56:19.2789090Z INFO : System Property Check: RAMSize - PASSED
2022-04-27T18:56:19.3413986Z INFO : Running System Property Check: SupportedArchitecture ...
2022-04-27T18:56:19.3413986Z INFO : Running on x64
2022-04-27T18:56:19.3413986Z INFO : System Property Check: SupportedArchitecture - PASSED
2022-04-27T18:56:19.4038877Z INFO : Running System Property Check: SupportedOS ...
2022-04-27T18:56:19.4038877Z INFO : Running on workstation.
2022-04-27T18:56:19.4038877Z INFO : System Property Check: SupportedOS - PASSED
2022-04-27T18:56:19.4663943Z INFO : Running System Property Check: SupportedPatches ...
2022-04-27T18:56:19.4663943Z INFO : System Property Check: SupportedPatches - PASSED
2022-04-27T18:56:19.5258219Z INFO : Running System Property Check: ValidTempDirectory ...
2022-04-27T18:56:19.5258219Z INFO : Temp folder exists.
2022-04-27T18:56:19.5258219Z INFO : System Property Check: ValidTempDirectory - PASSED
2022-04-27T18:56:19.5883023Z INFO : Running System Property Check: ValidLocalInstallSourceDirectory ...
2022-04-27T18:56:19.5883023Z INFO : No local install source folder to validate.
2022-04-27T18:56:19.5883023Z INFO : System Property Check: ValidLocalInstallSourceDirectory - PASSED
2022-04-27T18:56:19.6508240Z INFO : Running System Property Check: ValidServer ...
2022-04-27T18:56:19.6508240Z INFO : System Property Check: ValidServer - PASSED
2022-04-27T18:56:19.7133952Z INFO : Running System Property Check: ValidDeploymentInfo ...
2022-04-27T18:56:19.7144170Z INFO : Current Time: 2022-04-27T18:56:19.714000
2022-04-27T18:56:19.7172856Z INFO : This computer is part of the workgroup: WORKGROUP
2022-04-27T18:56:19.7172856Z INFO : Domain Name: WORKGROUP
2022-04-27T18:56:19.7172856Z INFO : Computer Name: DESKTOP-7D3H6UF
2022-04-27T18:56:19.7172856Z INFO : Computer Description is not available. 
2022-04-27T18:56:19.7172856Z INFO : Operating system friendly name: Windows 10 Pro 
2022-04-27T18:56:19.7172856Z INFO : Operating system for status: WIN10
2022-04-27T18:56:19.7172856Z INFO : ProductType: 48
2022-04-27T18:56:19.7172856Z INFO : Session user: DESKTOP-7D3H6UF\\admin
2022-04-27T18:56:19.7172856Z INFO : Last logged on user: DESKTOP-7D3H6UF\\admin
2022-04-27T18:56:19.7172856Z INFO : User principal name: 
2022-04-27T18:56:19.7172856Z INFO : Fully Qualified Domain Name: DESKTOP-7D3H6UF
2022-04-27T18:56:19.7172856Z INFO : Processor architecture: x64
2022-04-27T18:56:19.7172856Z INFO : OS Major Version: 10 and OS Minor Version: 0
2022-04-27T18:56:19.7172856Z INFO : Friendly OS Name: WIN10
2022-04-27T18:56:19.7172856Z INFO : Is server?: 0
2022-04-27T18:56:19.7172856Z INFO : Sending HTTP 'POST' request to: sophos/management/ep/install/deployment-info/3
2022-04-27T18:56:19.7330292Z INFO : Did not discover an URL for a PAC file
2022-04-27T18:56:19.7330292Z INFO : Attempting to connect using proxy '' of type 'Empty Proxy'.
2022-04-27T18:56:19.7330292Z INFO : Set security protocol: 00000800
2022-04-27T18:56:19.7330292Z INFO : Opening connection to mcs2-cloudstation-us-east-2.prod.hydra.sophos.com
2022-04-27T18:56:19.7330292Z INFO : Sending request for connection confirmation through potential proxy
2022-04-27T18:56:19.7330292Z INFO : Request content size: 0
2022-04-27T18:56:19.9109290Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
2022-04-27T18:56:19.9109290Z INFO : Subject certificate failed validation against root CA: SophosCA1
2022-04-27T18:56:19.9266249Z INFO : Subject certificate failed validation against root CA: SophosCA2
2022-04-27T18:56:19.9266249Z INFO : Certificate check succeeded
2022-04-27T18:56:19.9266249Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
2022-04-27T18:56:19.9578722Z INFO : Response status code: 200
2022-04-27T18:56:19.9578722Z INFO : Response data size: 168
2022-04-27T18:56:19.9578722Z INFO : trySendRequestThroughPotentialProxy returning response with status code: 200
2022-04-27T18:56:19.9734294Z INFO : Request content size: 1359
2022-04-27T18:56:19.9734294Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
2022-04-27T18:56:19.9734294Z INFO : Subject certificate failed validation against root CA: SophosCA1
2022-04-27T18:56:19.9734294Z INFO : Subject certificate failed validation against root CA: SophosCA2
2022-04-27T18:56:19.9734294Z INFO : Certificate check succeeded
2022-04-27T18:56:19.9734294Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
2022-04-27T18:56:20.0203421Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
2022-04-27T18:56:20.0360194Z INFO : Subject certificate failed validation against root CA: SophosCA1
2022-04-27T18:56:20.0360194Z INFO : Subject certificate failed validation against root CA: SophosCA2
2022-04-27T18:56:20.0360194Z INFO : Certificate check succeeded
2022-04-27T18:56:20.0360194Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
2022-04-27T18:56:20.0360194Z INFO : Response status code: 200
2022-04-27T18:56:20.0360194Z INFO : Response data size: 213
2022-04-27T18:56:20.0360194Z INFO : Parsing message received for deployment token: {"registrationToken":"704e0399bfd289eb20ecda4b78c5425018c69c709cc6c516305f28ba3819f8b5","dciFileName":"833fc0a0a01dbf9373a96f04f0beb4d9","products":[{"product":"INTERCEPT_ADVANCED","supported":true,"reasons":[]}]}
2022-04-27T18:56:20.0360194Z INFO : Model::token value changed to: 704e0399bfd289eb20ecda4b78c5425018c69c709cc6c516305f28ba3819f8b5
2022-04-27T18:56:20.0360194Z INFO : Licenses available: INTERCEPT_ADVANCED 
2022-04-27T18:56:20.1156413Z INFO : Running System Property Check: InstallationInProgress ...
2022-04-27T18:56:20.1156413Z INFO : System Property Check: InstallationInProgress - PASSED
2022-04-27T18:56:20.1781516Z INFO : Running System Property Check: SafeGuardEncryption ...
2022-04-27T18:56:20.1781516Z INFO : Entered installedProductCode, upgradeCode={BA2F47D3-1C17-40E7-8DE7-1CD733442B6C}
2022-04-27T18:56:20.1781516Z INFO : Product is not installed
2022-04-27T18:56:20.1781516Z INFO : licensesContainFeature(DEVICE_ENCRYPTION): false
2022-04-27T18:56:20.1781516Z INFO : System Property Check: SafeGuardEncryption - PASSED
2022-04-27T18:56:22.6567966Z INFO : Starting installation process.
2022-04-27T18:56:22.6680750Z INFO : About to execute command: CleanSophosIfeoKeysCommand
2022-04-27T18:56:22.6680750Z INFO : Command 'CleanSophosIfeoKeysCommand' completed with success with reboot code '0' and error message ''.
2022-04-27T18:56:22.6680750Z INFO : About to execute command: WaitForSauUpdateCommand
2022-04-27T18:56:22.6680750Z INFO : SAU update is not in progress
2022-04-27T18:56:22.6837285Z INFO : Command 'WaitForSauUpdateCommand' completed with success with reboot code '0' and error message ''.
2022-04-27T18:56:22.6837285Z INFO : About to execute command: CompetitorDetector
2022-04-27T18:56:22.6962684Z INFO : Command 'CompetitorDetector' completed with success with reboot code '0' and error message ''.
2022-04-27T18:56:22.6962684Z INFO : About to execute command: Register
2022-04-27T18:56:22.6962684Z INFO : Ensuring any MCS client service is stopped to prevent race for policy retrieval
2022-04-27T18:56:22.6962684Z INFO : Sending HTTP 'POST' request to: sophos/management/ep/install/register
2022-04-27T18:56:22.6962684Z INFO : Did not discover an URL for a PAC file
2022-04-27T18:56:22.6962684Z INFO : Attempting to connect using proxy '' of type 'Empty Proxy'.
2022-04-27T18:56:22.6962684Z INFO : Set security protocol: 00000800
2022-04-27T18:56:22.6962684Z INFO : Opening connection to mcs2-cloudstation-us-east-2.prod.hydra.sophos.com
2022-04-27T18:56:22.6962684Z INFO : Sending request for connection confirmation through potential proxy
2022-04-27T18:56:22.7027547Z INFO : Request content size: 0
2022-04-27T18:56:22.7027547Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
2022-04-27T18:56:22.7027547Z INFO : Subject certificate failed validation against root CA: SophosCA1
2022-04-27T18:56:22.7027547Z INFO : Subject certificate failed validation against root CA: SophosCA2
2022-04-27T18:56:22.7027547Z INFO : Certificate check succeeded
2022-04-27T18:56:22.7027547Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
2022-04-27T18:56:22.7341331Z INFO : Response status code: 200
2022-04-27T18:56:22.7496389Z INFO : Response data size: 168
2022-04-27T18:56:22.7496389Z INFO : trySendRequestThroughPotentialProxy returning response with status code: 200
2022-04-27T18:56:22.7496389Z INFO : Request content size: 1359
2022-04-27T18:56:22.7496389Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
2022-04-27T18:56:22.7496389Z INFO : Subject certificate failed validation against root CA: SophosCA1
2022-04-27T18:56:22.7496389Z INFO : Subject certificate failed validation against root CA: SophosCA2
2022-04-27T18:56:22.7496389Z INFO : Certificate check succeeded
2022-04-27T18:56:22.7496389Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
2022-04-27T18:56:22.9544302Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
2022-04-27T18:56:22.9544302Z INFO : Subject certificate failed validation against root CA: SophosCA1
2022-04-27T18:56:22.9544302Z INFO : Subject certificate failed validation against root CA: SophosCA2
2022-04-27T18:56:22.9544302Z INFO : Certificate check succeeded
2022-04-27T18:56:22.9544302Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
2022-04-27T18:56:22.9544302Z INFO : Response status code: 200
2022-04-27T18:56:22.9544302Z INFO : Response data size: 72
2022-04-27T18:56:22.9544302Z INFO : Retrieved endpoint id: 9a3e450a-3611-d445-49af-e4625adf05d6
2022-04-27T18:56:23.9738398Z INFO : Sending HTTP 'GET' request to: sophos/management/ep/install/flags/endpoint/9a3e450a-3611-d445-49af-e4625adf05d6
2022-04-27T18:56:23.9738398Z INFO : Request content size: 0
2022-04-27T18:56:23.9738398Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
2022-04-27T18:56:23.9738398Z INFO : Subject certificate failed validation against root CA: SophosCA1
2022-04-27T18:56:23.9738398Z INFO : Subject certificate failed validation against root CA: SophosCA2
2022-04-27T18:56:23.9893177Z INFO : Certificate check succeeded
2022-04-27T18:56:23.9893177Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
2022-04-27T18:56:24.0363230Z INFO : Response status code: 200
2022-04-27T18:56:24.0363230Z INFO : Response data size: 2792
2022-04-27T18:56:24.0363230Z INFO : Loaded 77 endpoint flags
2022-04-27T18:56:24.0363230Z INFO : Using SDDS3: Enabled in Central AND SED is not installed
2022-04-27T18:56:24.0363230Z INFO : Setting sdds3 download to: true
2022-04-27T18:56:24.0363230Z INFO : Sending HTTP 'PUT' request to: sophos/management/ep/install/statuses/endpoint/9a3e450a-3611-d445-49af-e4625adf05d6
2022-04-27T18:56:24.0363230Z INFO : Request content size: 990
2022-04-27T18:56:24.0518633Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
2022-04-27T18:56:24.0518633Z INFO : Subject certificate failed validation against root CA: SophosCA1
2022-04-27T18:56:24.0518633Z INFO : Subject certificate failed validation against root CA: SophosCA2
2022-04-27T18:56:24.0518633Z INFO : Certificate check succeeded
2022-04-27T18:56:24.0518633Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
2022-04-27T18:56:24.1456312Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
2022-04-27T18:56:24.1456312Z INFO : Subject certificate failed validation against root CA: SophosCA1
2022-04-27T18:56:24.1456312Z INFO : Subject certificate failed validation against root CA: SophosCA2
2022-04-27T18:56:24.1456312Z INFO : Certificate check succeeded
2022-04-27T18:56:24.1456312Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
2022-04-27T18:56:24.1456312Z INFO : Response status code: 200
2022-04-27T18:56:24.1611971Z INFO : Response data size: 0
2022-04-27T18:56:24.1611971Z INFO : Attempt to retrieve policy.
2022-04-27T18:56:24.1611971Z INFO : Sending HTTP 'GET' request to: sophos/management/ep/install/commands/applications/APPSPROXY;ALC/endpoint/9a3e450a-3611-d445-49af-e4625adf05d6
2022-04-27T18:56:24.1611971Z INFO : Request content size: 0
2022-04-27T18:56:24.1611971Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
2022-04-27T18:56:24.1611971Z INFO : Subject certificate failed validation against root CA: SophosCA1
2022-04-27T18:56:24.1611971Z INFO : Subject certificate failed validation against root CA: SophosCA2
2022-04-27T18:56:24.1611971Z INFO : Certificate check succeeded
2022-04-27T18:56:24.1611971Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
2022-04-27T18:56:24.2082120Z INFO : Response status code: 200
2022-04-27T18:56:24.2082120Z INFO : Response data size: 790
2022-04-27T18:56:24.2082120Z INFO : Successfully retrieved policy with policyId='e0b4693cb23796ab8a55cee37b1409784d4e97bff788ef66c1a0c204334d1318'.
2022-04-27T18:56:24.2082120Z INFO : Sending HTTP 'DELETE' request to: sophos/management/ep/install/commands/endpoint/9a3e450a-3611-d445-49af-e4625adf05d6/25
2022-04-27T18:56:24.2082120Z INFO : Request content size: 0
2022-04-27T18:56:24.2082120Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
2022-04-27T18:56:24.2082120Z INFO : Subject certificate failed validation against root CA: SophosCA1
2022-04-27T18:56:24.2082120Z INFO : Subject certificate failed validation against root CA: SophosCA2
2022-04-27T18:56:24.2082120Z INFO : Certificate check succeeded
2022-04-27T18:56:24.2237234Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
2022-04-27T18:56:24.2550993Z INFO : Response status code: 200
2022-04-27T18:56:24.2706530Z INFO : Response data size: 0
2022-04-27T18:56:24.2706530Z INFO : Sending HTTP 'GET' request to: sophos/management/ep/install/policy/application/ALC/e0b4693cb23796ab8a55cee37b1409784d4e97bff788ef66c1a0c204334d1318
2022-04-27T18:56:24.2706530Z INFO : Request content size: 0
2022-04-27T18:56:24.2706530Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
2022-04-27T18:56:24.2706530Z INFO : Subject certificate failed validation against root CA: SophosCA1
2022-04-27T18:56:24.2706530Z INFO : Subject certificate failed validation against root CA: SophosCA2
2022-04-27T18:56:24.2706530Z INFO : Certificate check succeeded
2022-04-27T18:56:24.2862376Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
2022-04-27T18:56:24.3956966Z INFO : Response status code: 200
2022-04-27T18:56:24.3956966Z INFO : Response data size: 2810
2022-04-27T18:56:24.3956966Z INFO : Assume obfuscated SAU password
2022-04-27T18:56:24.5049366Z INFO : Updating subscription created with id: Base, rigidname: WindowsCloudNextGen, baseversion: 11, tag: RECOMMENDED, fixedversion: 
2022-04-27T18:56:24.5049366Z INFO : Updating subscription created with id: Clean, rigidname: WindowsCloudClean, baseversion: 1, tag: RECOMMENDED, fixedversion: 
2022-04-27T18:56:24.5049366Z INFO : Updating subscription created with id: CloudAV, rigidname: WindowsCloudAV, baseversion: 11, tag: RECOMMENDED, fixedversion: 
2022-04-27T18:56:24.5049366Z INFO : Updating subscription created with id: HitmanProAlert, rigidname: WindowsCloudHitmanProAlert, baseversion: 1, tag: RECOMMENDED, fixedversion: 
2022-04-27T18:56:24.5049366Z INFO : Features: APPCNTRL
2022-04-27T18:56:24.5049366Z INFO : Features: AV
2022-04-27T18:56:24.5049366Z INFO : Features: CLEAN
2022-04-27T18:56:24.5049366Z INFO : Features: CORE
2022-04-27T18:56:24.5049366Z INFO : Features: DLP
2022-04-27T18:56:24.5049366Z INFO : Features: DVCCNTRL
2022-04-27T18:56:24.5049366Z INFO : Features: EFW
2022-04-27T18:56:24.5049366Z INFO : Features: HBT
2022-04-27T18:56:24.5049366Z INFO : Features: NTP
2022-04-27T18:56:24.5049366Z INFO : Features: SAV
2022-04-27T18:56:24.5049366Z INFO : Features: SDU
2022-04-27T18:56:24.5049366Z INFO : Features: WEBCNTRL
2022-04-27T18:56:24.5049366Z INFO : Features: XPD
2022-04-27T18:56:24.5049366Z INFO : Setting https download to: true
2022-04-27T18:56:24.5049366Z INFO : Updating  credentials created with username: EO85YWIF8Q
2022-04-27T18:56:24.5049366Z INFO : Sending HTTP 'POST' request to: sophos/management/ep/install/authenticate/endpoint/9a3e450a-3611-d445-49af-e4625adf05d6/role/endpoint
2022-04-27T18:56:24.5205652Z INFO : Request content size: 0
2022-04-27T18:56:24.5205652Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
2022-04-27T18:56:24.5205652Z INFO : Subject certificate failed validation against root CA: SophosCA1
2022-04-27T18:56:24.5205652Z INFO : Subject certificate failed validation against root CA: SophosCA2
2022-04-27T18:56:24.5205652Z INFO : Certificate check succeeded
2022-04-27T18:56:24.5205652Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
2022-04-27T18:56:24.7199517Z INFO : Response status code: 200
2022-04-27T18:56:24.7355326Z INFO : Response data size: 958
2022-04-27T18:56:24.7355326Z INFO : Retrieved mcs auth: tenant_id=6bda684d-b3e8-4ece-9c41-13566b47b44c device_id=a9e354a0-6311-4d54-94fa-4e26a5fd506d
2022-04-27T18:56:24.7355326Z INFO : Restarting MCS Client service if stopped
2022-04-27T18:56:24.7355326Z INFO : Command 'Register' completed with success with reboot code '0' and error message ''.
2022-04-27T18:56:24.7355326Z INFO : About to execute command: Download
2022-04-27T18:56:24.7355326Z INFO : Update Cache Cert Path folder: C:\\ProgramData\\Sophos\\Certificates\\AutoUpdate\\Cache
2022-04-27T18:56:24.7355326Z INFO : About to create directory: C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\data\\repo
2022-04-27T18:56:24.7355326Z INFO : Created directory: C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\data\\repo
2022-04-27T18:56:24.7355326Z INFO : About to set security DACL on: C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\data
2022-04-27T18:56:24.7355326Z INFO : Set security DACL on: C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\data
2022-04-27T18:56:24.7355326Z INFO : About to create directory: C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded
2022-04-27T18:56:24.7355326Z INFO : Created directory: C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded
2022-04-27T18:56:24.7355326Z INFO : About to set security DACL on: C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded
2022-04-27T18:56:24.7355326Z INFO : Set security DACL on: C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded
2022-04-27T18:56:24.7510754Z INFO : About to create directory: C:\\ProgramData\\Sophos\\Certificates\\AutoUpdate\\Cache
2022-04-27T18:56:24.7510754Z INFO : Created directory: C:\\ProgramData\\Sophos\\Certificates\\AutoUpdate\\Cache
2022-04-27T18:56:24.7510754Z INFO : About to set security DACL on: C:\\ProgramData\\Sophos\\Certificates\\AutoUpdate\\Cache
2022-04-27T18:56:24.7510754Z INFO : Set security DACL on: C:\\ProgramData\\Sophos\\Certificates\\AutoUpdate\\Cache
2022-04-27T18:56:24.7510754Z INFO : CRT required: adding 'CRT' feature
2022-04-27T18:56:24.7510754Z INFO : No manually configured proxy
2022-04-27T18:56:24.7510754Z INFO : WinHttp default proxy not set
2022-04-27T18:56:24.7510754Z INFO : WinHttp discovered proxies not found
2022-04-27T18:56:24.7510754Z INFO : Trying update service url https://sus.sophosupd.com/v3/6bda684d-b3e8-4ece-9c41-13566b47b44c/a9e354a0-6311-4d54-94fa-4e26a5fd506d with proxy: <direct; no proxy>
2022-04-27T18:56:25.2490817Z INFO : 403 from https://sus.sophosupd.com/v3/6bda684d-b3e8-4ece-9c41-13566b47b44c/a9e354a0-6311-4d54-94fa-4e26a5fd506d with proxy: <direct; no proxy>
2022-04-27T18:56:25.5147338Z INFO : Trying update service url https://sus.sophosupd.com/v3/6bda684d-b3e8-4ece-9c41-13566b47b44c/a9e354a0-6311-4d54-94fa-4e26a5fd506d with proxy: <direct; no proxy> (try 2 of 5)
2022-04-27T18:56:25.6395859Z INFO : 403 from https://sus.sophosupd.com/v3/6bda684d-b3e8-4ece-9c41-13566b47b44c/a9e354a0-6311-4d54-94fa-4e26a5fd506d with proxy: <direct; no proxy>
2022-04-27T18:56:26.6537168Z INFO : Trying update service url https://sus.sophosupd.com/v3/6bda684d-b3e8-4ece-9c41-13566b47b44c/a9e354a0-6311-4d54-94fa-4e26a5fd506d with proxy: <direct; no proxy> (try 3 of 5)
2022-04-27T18:56:26.7786290Z INFO : 403 from https://sus.sophosupd.com/v3/6bda684d-b3e8-4ece-9c41-13566b47b44c/a9e354a0-6311-4d54-94fa-4e26a5fd506d with proxy: <direct; no proxy>
2022-04-27T18:56:31.7921669Z INFO : Trying update service url https://sus.sophosupd.com/v3/6bda684d-b3e8-4ece-9c41-13566b47b44c/a9e354a0-6311-4d54-94fa-4e26a5fd506d with proxy: <direct; no proxy> (try 4 of 5)
2022-04-27T18:56:31.9015671Z INFO : 403 from https://sus.sophosupd.com/v3/6bda684d-b3e8-4ece-9c41-13566b47b44c/a9e354a0-6311-4d54-94fa-4e26a5fd506d with proxy: <direct; no proxy>
2022-04-27T18:57:01.9192397Z INFO : Trying update service url https://sus.sophosupd.com/v3/6bda684d-b3e8-4ece-9c41-13566b47b44c/a9e354a0-6311-4d54-94fa-4e26a5fd506d with proxy: <direct; no proxy> (try 5 of 5)
2022-04-27T18:57:02.1379892Z INFO : 403 from https://sus.sophosupd.com/v3/6bda684d-b3e8-4ece-9c41-13566b47b44c/a9e354a0-6311-4d54-94fa-4e26a5fd506d with proxy: <direct; no proxy>
2022-04-27T18:57:02.1379892Z ERROR : Error: No reachable update service locations
2022-04-27T18:57:02.1379892Z ERROR : DownloadCommand::onRun() failed with std::exception: SDDS3 sync failed
2022-04-27T18:57:02.1379892Z INFO : Command 'Download' completed with failure with reboot code '0' and error message 'Could not download software'.
2022-04-27T18:57:02.1379892Z ERROR : Installation failed.
2022-04-27T18:57:02.1379892Z INFO : Sending HTTP 'POST' request to: sophos/management/ep/install/events/endpoint/9a3e450a-3611-d445-49af-e4625adf05d6
2022-04-27T18:57:02.1534999Z INFO : Did not discover an URL for a PAC file
2022-04-27T18:57:02.1534999Z INFO : Attempting to connect using proxy '' of type 'Empty Proxy'.
2022-04-27T18:57:02.1534999Z INFO : Set security protocol: 00000800
2022-04-27T18:57:02.1534999Z INFO : Opening connection to mcs2-cloudstation-us-east-2.prod.hydra.sophos.com
2022-04-27T18:57:02.1534999Z INFO : Sending request for connection confirmation through potential proxy
2022-04-27T18:57:02.1534999Z INFO : Request content size: 0
2022-04-27T18:57:02.1534999Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
2022-04-27T18:57:02.1534999Z INFO : Subject certificate failed validation against root CA: SophosCA1
2022-04-27T18:57:02.1534999Z INFO : Subject certificate failed validation against root CA: SophosCA2
2022-04-27T18:57:02.1534999Z INFO : Certificate check succeeded
2022-04-27T18:57:02.1534999Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
2022-04-27T18:57:02.1971330Z INFO : Response status code: 200
2022-04-27T18:57:02.1971330Z INFO : Response data size: 168
2022-04-27T18:57:02.2128581Z INFO : trySendRequestThroughPotentialProxy returning response with status code: 200
2022-04-27T18:57:02.2128581Z INFO : Request content size: 973
2022-04-27T18:57:02.2128581Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
2022-04-27T18:57:02.2128581Z INFO : Subject certificate failed validation against root CA: SophosCA1
2022-04-27T18:57:02.2128581Z INFO : Subject certificate failed validation against root CA: SophosCA2
2022-04-27T18:57:02.2128581Z INFO : Certificate check succeeded
2022-04-27T18:57:02.2128581Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
2022-04-27T18:57:02.3379101Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
2022-04-27T18:57:02.3534532Z INFO : Subject certificate failed validation against root CA: SophosCA1
2022-04-27T18:57:02.3534532Z INFO : Subject certificate failed validation against root CA: SophosCA2
2022-04-27T18:57:02.3534532Z INFO : Certificate check succeeded
2022-04-27T18:57:02.3534532Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
2022-04-27T18:57:02.3534532Z INFO : Response status code: 200
2022-04-27T18:57:02.3534532Z INFO : Response data size: 0
2022-04-27T18:57:14.4368050Z INFO : Gathering diagnostics
2022-04-27T18:57:14.4589072Z INFO : Sending HTTP 'PUT' request to: prod/e6c836e4-f37c-5451-b5ef-1e08fef76586-2022-04-27T18:57:14Z.tar.gz
2022-04-27T18:57:14.4589072Z INFO : Did not discover an URL for a PAC file
2022-04-27T18:57:14.4589072Z INFO : Attempting to connect using proxy '' of type 'Empty Proxy'.
2022-04-27T18:57:14.4589072Z INFO : Set security protocol: 00000800
2022-04-27T18:57:14.4589072Z INFO : Opening connection to installer1.sophosupd.com
2022-04-27T18:57:14.4589072Z INFO : Request content size: 6607
2022-04-27T18:57:14.7142956Z INFO : Sending request
2022-04-27T18:57:14.7142956Z INFO : Request sent
2022-04-27T18:57:15.0907425Z INFO : Sending request
2022-04-27T18:57:15.1062470Z INFO : Request sent
2022-04-27T18:57:15.1062470Z INFO : Response status code: 200
2022-04-27T18:57:15.1062470Z INFO : Response data size: 0
2022-04-27T18:57:15.1062470Z INFO : trySendRequestThroughPotentialProxy returning response with status code: 200
2022-04-27T18:57:15.1062470Z INFO : HTTP response for diagnostics upload: 
2022-04-27T18:57:15.1267902Z INFO : Data folder: C:\\ProgramData\\Sophos\\AutoUpdate\\data
2022-04-27T18:57:15.1267902Z INFO : Sending HTTP 'PUT' request to: prod/2022-04-27T18:57:15Z-2022-04-27T18:57:15Z-e6c836e4-f37c-5451-b5ef-1e08fef76586.json
2022-04-27T18:57:15.1267902Z INFO : Did not discover an URL for a PAC file
2022-04-27T18:57:15.1267902Z INFO : Attempting to connect using proxy '' of type 'Empty Proxy'.
2022-04-27T18:57:15.1267902Z INFO : Set security protocol: 00000800
2022-04-27T18:57:15.1267902Z INFO : Opening connection to t1.sophosupd.com
2022-04-27T18:57:15.1267902Z INFO : Request content size: 3907
2022-04-27T18:57:15.2231433Z INFO : Sending request
2022-04-27T18:57:15.2231433Z INFO : Request sent
2022-04-27T18:57:15.5999468Z INFO : Sending request
2022-04-27T18:57:15.6154367Z INFO : Request sent
2022-04-27T18:57:15.6154367Z INFO : Response status code: 200
2022-04-27T18:57:15.6154367Z INFO : Response data size: 0
2022-04-27T18:57:15.6154367Z INFO : trySendRequestThroughPotentialProxy returning response with status code: 200
2022-04-27T18:57:15.6154367Z INFO : Telemetry Response: 
2022-04-27T18:57:15.6154367Z INFO : User profile unloaded
2022-04-27T18:57:15.6341414Z INFO : Cleaning up extracted files
2022-04-27T18:57:15.6453831Z ERROR : Exception: Setup program failed with code: 1



This thread was automatically locked due to age.
Parents
  • Hi Brian,

    Thanks for reaching out to the Sophos Community Forums. 

    If this is a new device, the certificates present on the device may need to be updated. Generally, if you have not turned off Automatic Root Certificate Updating via GPOs, Windows Updates will update your device so that it can connect and download successfully. 

    This setting can be verified by checking the following registry key.
    - HKLM\Software\Policies\Microsoft\SystemCertificates\AuthRoot
    - DisableRootAutoUpdate

    The following article may also help with this.
    - Locate the Central Endpoint SSL Certificate.

Reply
  • Hi Brian,

    Thanks for reaching out to the Sophos Community Forums. 

    If this is a new device, the certificates present on the device may need to be updated. Generally, if you have not turned off Automatic Root Certificate Updating via GPOs, Windows Updates will update your device so that it can connect and download successfully. 

    This setting can be verified by checking the following registry key.
    - HKLM\Software\Policies\Microsoft\SystemCertificates\AuthRoot
    - DisableRootAutoUpdate

    The following article may also help with this.
    - Locate the Central Endpoint SSL Certificate.

Children