Workstaiton reports "Computer Not Yet Managed" 0xfffffffd

Question

We have one workstation that has not reported into the console since December of 2010.

The error listed is Computer Not Yet Managed. [0xfffffffd]

I noticed that in the Event Viewer, there were several errors of the following:

The Sophos Message Router service terminated unexpectedly. It has done this 436 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.

I've tried restarting the Sophos Message Router several times but it will not restart. I've also followed the recomended steps under http://www.sophos.com/support/knowledgebase/article/14449.html but they have not worked.

I know this workstation has Sophos installed and it is updating, just not reporting back to the console. Are there any other steps I can take before trying to uninstall/reinstall to get the Sophos Message Router service to start?

This thread was automatically locked due to age.

jak · Accepted Answer

Hi,

The error: 
 E Router::Start: Caught CAccessFailureException:CACertificate not found would suggest that the cac entry in the registry is missing or can not be read. I.e. 
 HKEY_LOCAL_MACHINE\SOFTWARE\[Wow6432Node]\Sophos\Messaging System\cac

I would suggest, on this machine: 
 1. From the central installation directory the machines updates from copy the files: cac.pem and mrinit.conf to the machine, into the directory where RMS is installed, e.g. \Program Files (x86)\Sophos\Remote Management System\. 
 The files should already be there I just would like to make sure they are not corrupt and this was the cause of the problem. 
 2. As an administrator, on the machine run the executable: 
 \Program Files (x86)\Sophos\Remote Management System\ClientMrinit.exe

3. Check if the above cac registry key is then written and if so start the Router service. It should start, in about 1 minute the machine should appears as managed in SEC.

If there are problems, the log file created by ClientMrinit.exe will be in the same directory as the exe.

Regards, 
 Jak :9419