SEC 4.7 upgrade to SEC 5.0 fail

Hi Christian,

Thanks your help, May I know now I have upgraded to SEC 5.0 still can backup SEC4.7 database right?

the format is : backupdb.bat D:\sophosdb.bak .\sophos sophos47 ?

Thanks & Regards

XM 

Hello XM,

normally you should back up the database before trying to upgrade. In fact, you should back up your database at regular intervals - this of course depends on the information you could lose but want to keep. From SEC5.0 on there is a utility (DataBackRestore.exe) which backs up (and if necessary restores)  not only the database but also the management servers configuration.

Neither does should the upgrade alter the previous database(s) nor does SEC use a database other than the "current". But - cases where the database you are upgrading from could be zilched are imaginable . It is possible (and normally still useful) to back up an old database after an attempt to upgrade.

The format looks ok

Christian

Hi Christian,

When i try reun upgradedb.exe show below error. but i checked at regedit show  initial catalog=SOPHOS50

C:\Program Files\Sophos\Enterprise Console>upgradedb.exe -debug -sourceVersion=50
02.03.2012 10:41:14      ... successfully completed.
02.03.2012 10:41:14 Validating parameter values ...
02.03.2012 10:41:14 Invalid source version: 50
02.03.2012 10:41:14 Exit code 1 (Invalid command line qualifier.)

and i am check event show error

Log Name:      Application
Source:        Sophos Patch
Date:          3/2/2012 10:42:32 AM
Event ID:      1030
Task Category: (2)
Level:         Error
Keywords:      Classic
User:          N/A
Computer:     
Description:
PID 3652 : TID 1
An error occurred while processing the Sophos patch package.
-- Sophos Exception Details --
Source Message: Sophos feed processing error.
Source:
Source Timestamp: 3/2/2012 10:42:31 AM
Source Machine: HKINFRAAV1
Source Exception Type: Sophos.NAC.Core.ExceptionManagement.EndForceException
Source:
Source App Domain: PatchDataLoader.exe
Source Thread Id: 1
Source Thread Identity:
Source Win Identity: IAPPARELINTL\sophos.adm
Help Link:
Source Stack Trace:

--Runtime Evidence--
  -- Sophos Exception Details --(Contained Exception)
  Source Message: SDDS2 configuration registry value not found.
  Source: FeedInterpreter
  Source Timestamp: 3/2/2012 10:42:31 AM
  Source Machine: HKINFRAAV1
  Source Exception Type: Sophos.Patch.FeedInterpreter.SophosFeedException
  Source: FeedInterpreter
  Target: Void BuildSddsPatchPackageFolder()
  Source App Domain: PatchDataLoader.exe
  Source Thread Id: 1
  Source Thread Identity:
  Source Win Identity: IAPPARELINTL\sophos.adm
  Help Link:
  Source Stack Trace:

--Runtime Evidence--

Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Sophos Patch" />
    <EventID Qualifiers="0">1030</EventID>
    <Level>2</Level>
    <Task>2</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2012-03-02T02:42:32.000Z" />
    <EventRecordID>356</EventRecordID>
    <Channel>Application</Channel>
    <Computer>HKINFRAAV1.iapparelintl.com</Computer>
    <Security />
  </System>
  <EventData>
    <Data>PID 3652 : TID 1
An error occurred while processing the Sophos patch package.
-- Sophos Exception Details --
Source Message: Sophos feed processing error.
Source:
Source Timestamp: 3/2/2012 10:42:31 AM
Source Machine: HKINFRAAV1
Source Exception Type: Sophos.NAC.Core.ExceptionManagement.EndForceException
Source:
Source App Domain: PatchDataLoader.exe
Source Thread Id: 1
Source Thread Identity:
Source Win Identity: IAPPARELINTL\sophos.adm
Help Link:
Source Stack Trace:

--Runtime Evidence--
  -- Sophos Exception Details --(Contained Exception)
  Source Message: SDDS2 configuration registry value not found.
  Source: FeedInterpreter
  Source Timestamp: 3/2/2012 10:42:31 AM
  Source Machine: HKINFRAAV1
  Source Exception Type: Sophos.Patch.FeedInterpreter.SophosFeedException
  Source: FeedInterpreter
  Target: Void BuildSddsPatchPackageFolder()
  Source App Domain: PatchDataLoader.exe
  Source Thread Id: 1
  Source Thread Identity:
  Source Win Identity: IAPPARELINTL\sophos.adm
  Help Link:
  Source Stack Trace:

--Runtime Evidence--
</Data>
  </EventData>
</Event>

Then i check the regedit the sophos path is

computer\HKLM\software\sophos\ee\management tools

please help check what happen.

Thanks & Regards

XM

Hello XM,

-sourceVersion=50

is invalid for SEC5.0 (it would be valid with the soon to come 5.1). sourceVersion is version you are upgrading from, the result is always the current version. Thus, as I wrote here, -sourceVersion=47 is the applicable value. I suggest you re-init the SOPHO50 database before running UpgradeDB.exe again. Use InstallDB.bat from the %ProgramFiles%\Sophos\Enterprise Console\DB\Core directory.

As to the Patch error - it might be the consequence of the SOPHOS50 database not yet being correctly initialized. So you should ignore it until the database has been successfully migrated. 

HTH

Christian

Hi Christian,

Thanks your help,follow your steps can start sophos management service now , but now still got one issue, when restart server, the management service cannot auto start, must manual click start, below is server restart after the event log

Event ID : 8025

There is no database connection. management service will be shut down.

Event ID : 8004

Initialization failed.

step : creating a database connection

error : std::runtime_error

data : cannot open database "SOPHOS50" requested by the login. the login failed.

Please help check what hppen.

Thanks & Regards

XM

It looks like the SQL Server process hasn't started before the Sophos Management Service.

You could try making the Sophos Management Service dependant on the SQL service, see if that helps, e.g run:

sc config "Sophos Management Service" Depend= "SQL Server (MSSQLSERVER)"

Note: You will probably need to change the name to your SQL Server Service.

This should, in effect add the SQL server service to the DependOnService value under:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Sophos Management Service \

You could see if that helps

Regards,

Jak

Hi Jak,

Sorry, i am not clear.

run :

sc config "Sophos Management Service" Depend= "SQL Server (MSSQLSERVER)"

Note: You will probably need to change the name to your SQL Server Service.

this one is run at cmd.exe right? and probably need change the name, that is what name and need change to what?

other thing, now when restart SEC server will very  long time,need 2 hours can compeleted restart,  show operations in progress, please wait, machine will auto shut down when operatiions compeleted.

Thanks & Regards

XM

Hello XM,

whatever the server did before restarting (install updates?) it should do this only once and subsequent restarts should take much less time.

Yes, sc is run from a command window. If you run

sc query|find "SQL"

you'll get something like

DISPLAY_NAME: SQL Server Integration Services
DISPLAY_NAME: SQL Server FullText Search (MSSQLSERVER)
SERVICE_NAME: MSSQL$SOPHOS
DISPLAY_NAME: SQL Server (SOPHOS)
SERVICE_NAME: MSSQLSERVER
DISPLAY_NAME: SQL Server (MSSQLSERVER)
SERVICE_NAME: MSSQLServerOLAPService
DISPLAY_NAME: SQL Server Analysis Services (MSSQLSERVER)
DISPLAY_NAME: SQL Server Reporting Services (MSSQLSERVER)
SERVICE_NAME: SQLBrowser
DISPLAY_NAME: SQL Server Browser
SERVICE_NAME: SQLSERVERAGENT
DISPLAY_NAME: SQL Server Agent (MSSQLSERVER)
SERVICE_NAME: SQLWriter
DISPLAY_NAME: SQL Server VSS Writer

In this example you'd use

sc config "Sophos Management Service" Depend= " MSSQL$SOPHOS "

HTH

Christian

Hi Christian,

Server have not installing any windows updates, i try restart 2 time, show same inform and long time.

Thanks & Regards

XM