Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 3 replies
  • Subscribers 1 subscriber
  • Views 3379 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

How To Add A Missing / Deleted Update Manager

BenK

Good Afternoon - 

My company has one Enterprise Console and 4 update manager shares on different servers on our WAN.  All shares seem to be up to date and working as I've compared files and dates.  

The problem is that in the Enterprise Console, it only lists 3 Update Servers.  I tried to add the 4th by remoting to the server, then re-running the setup (from a UNC path on the ent console server) of the Update Manager installation.  When doing so, I tried to install it to the same path as the existing update share, but it gave me an error message saying that the previous share must be removed and pointed to c:\documents & Settings.  I re-ran it again and tried to install to the default path, but still got the message.  

I usually wouldn't mind deleting the old share and reinstalling it that way, but it's the only update manager for a major site and as I'm a Sophos newbie, I have no idea how long it would take to update and come online.  That, plus about 500 machines are pointed to that share currently.

Thanks!

:5440


This thread was automatically locked due to age.
  • 0

    Hi,

    If SUM is maintaining the distribution point on that SUM server ok it seems odd it doesn't appear in the SUM list in SEC.  In order for it to be configured and therefore working it would have had to have reported into SEC at somepoint in the past.

    Before you try reinstalling I would first troubleshoot if it isn't an Remote Management System problem.  Firstly I would ensure that the Agent logs are without error and that messages are flowing from the machine to the management server.

    The logs of the Sophos Management agent are here:

    \ProgramData\Sophos\remote management system\3\agent\logs\

    There are up to 4 by default which wrap as they get to 1MB in size.  I would suggest, restarting the Sophos Update Manager Service then restarting the Sophos Agent service on the machine, leave it 30 seconds and the take a look in the recently created agent log.

    Feel free to post the contents here, it might exceed the permitted size due to XML fragments.  What you should see happen is the agent logging on to SUM to get the status from it.  This should end in a status message being sent to the management server via the message router service on the machine.  

    I hope this points you in the right location.

    Jak

    :5442
  • 0

    I want to add:

    The agent logs should contain entries like

    15.10.2010 10:10:36 0920 I NewEvent: Sent EM-EntityEvent to EM
    15.10.2010 10:10:36 0A70 I SDDMA: Status report dispatched.

    In the corresponding router log (in ...\3\router\logs\) you should find

    15.10.2010 10:10:36 0650 I Routing to parent: id=00B80C7C, origin=Router$SUMserver:108033.Agent, dest=EM, type=EM-EntityEvent
    15.10.2010 10:10:36 1644 I Sent message (id=00B80C7C) to Router$MgmtServer

    Note that the "Sent ..." message might not come immediately after the "Routing to ...". If the server is also acting as a relay it could take several minutes - but you can correlate them by ID.

    @BenK: If I understand correctly you have not uninstalled the update manager from the "missing" SUM but tried to install "over" the existing installation. AFAIK this won't work without uninstalling first.

    HECK! Just wanted to see what happens if you try to delete a SUM from SEC - do not try this! It simply deleted the SUM without prompt and all the configuration information was gone. I've already contacted support as I think this is quite a dangerous "feature". Of course the SUM re-appeared soon afterwards but not the configuration data ... Be careful. Oh - in case you wonder: Yes, I did have a very recent backup and it took me about two minutes to get it working again. Don't I always tell you: Do backup your database regularly :smileywink:?

    Christian

    :5449
  • 0

    Support has confirmed that SEC lets you delete a secondary SUM without confirmation. Meanwhile be careful with your right-clicks in the Update managers view. :smileyhappy:

    Christian

    :5509