SEC 5.0.0.8
I am trying to reinstall the enterprise console over again to change the user and password used for the db. For some reason the install constantly fails. Any ideas?
This thread was automatically locked due to age.
HI,
What do the logs say?
In SEC 5.1 they are:
C:\ProgramData\Sophos\Management Installer\
In 5.0 they are in the installing users %temp%.
Start with the overview: "Sophos_bootstrapper" log. That will identify which component is failing, i..e DB, Server, Console. Paste it here if in doubt.
Then look a the MSI log assocaited with the failing component in the same directory
Regards,
Jak
It fails regardless of whether the Computer Browser service is running or not.
Started Setup.exe, located at: C:\sec_50\ServerInstaller
10/4/2012 3:14:27 PM, INFO : Verifying files in folder
10/4/2012 3:14:27 PM, INFO : Target folder verification completed successfully
10/4/2012 3:14:27 PM, INFO : Initialized COM in the main thread
10/4/2012 3:14:27 PM, INFO : The Winsock 2.2 dll was found okay.
10/4/2012 3:14:28 PM, INFO : Detected MSI version: 5.0.7601
10/4/2012 3:14:28 PM, INFO : Activate state: Idle
10/4/2012 3:14:28 PM, INFO : Computer is joined to domain: [domain1]
10/4/2012 3:14:28 PM, INFO : SEC 5.0 Console detected.
10/4/2012 3:14:28 PM, INFO : SEC 5.0 Server detected.
10/4/2012 3:14:28 PM, INFO : SEC 5.0 Database detected.
10/4/2012 3:14:28 PM, INFO : Modify workflow
10/4/2012 3:14:28 PM, INFO : Changed installation value: INSTALLDIR="C:\Program Files\Sophos"
10/4/2012 3:14:28 PM, INFO : Changed installation value: SERVER_FEEDBACKENABLED="1"
10/4/2012 3:14:28 PM, INFO : Changed installation value: SERVER_COMPUTERNAME="[computer name]"
10/4/2012 3:14:28 PM, INFO : Changed installation value: SERVER_PORT="80"
10/4/2012 3:14:28 PM, INFO : Changed installation value: SERVER_USERNAME="administrator"
10/4/2012 3:14:28 PM, INFO : Changed installation value: SERVER_USERNAMEDOMAIN="[domain1]"
10/4/2012 3:14:28 PM, INFO : Changed installation value: DATABASE_SERVERNAME="(local)\SOPHOS"
10/4/2012 3:14:28 PM, INFO : upn found: administrator@[domain1]
10/4/2012 3:14:28 PM, INFO : Changed installation value: SERVER_UPN="administrator@[domain1]"
10/4/2012 3:14:28 PM, INFO : Changed installation value: SERVER_FEEDBACKENABLED="1"
10/4/2012 3:14:28 PM, INFO : Changed installation value:
10/4/2012 3:14:28 PM, INFO : Changed installation value:
10/4/2012 3:14:28 PM, INFO : Verifying database MSI version is higher than installed database component version (if applicable)
10/4/2012 3:14:28 PM, INFO : Found MSI: C:\sec_50\ServerInstaller\Database64.msi version: 5
10/4/2012 3:14:28 PM, INFO : Found installed component: {D56C5477-7C3D-45E9-A1DD-EE698CC5CF3B} version: 5
10/4/2012 3:14:28 PM, INFO : Verifying server MSI version is higher than installed server component version (if applicable)
10/4/2012 3:14:28 PM, INFO : Found MSI: C:\sec_50\ServerInstaller\Server64.msi version: 5
10/4/2012 3:14:28 PM, INFO : Found installed component: {3886EB02-D881-4603-953B-4AE0E2A39665} version: 5
10/4/2012 3:14:28 PM, INFO : Verifying console MSI version is higher than installed console component version (if applicable)
10/4/2012 3:14:28 PM, INFO : Found MSI: C:\sec_50\ServerInstaller\Console64.msi version: 5
10/4/2012 3:14:28 PM, INFO : Found installed component: {5F3E2B99-3883-46FD-9B02-31B7C480A8B7} version: 5
10/4/2012 3:14:28 PM, INFO : Entered Welcome page.
10/4/2012 3:14:28 PM, INFO : Obtaining SQL instances on local machine...
10/4/2012 3:14:29 PM, INFO : Finished retrieving instances - Timeout
10/4/2012 3:14:29 PM, INFO : Obtaining remote SQL instances on network...
10/4/2012 3:14:30 PM, INFO : Finished retrieving instances - Timeout
10/4/2012 3:14:30 PM, INFO : Running System Property Check: User must be an administrator on this computer...
10/4/2012 3:14:30 PM, INFO : System Property Check: User must be an administrator on this computer - PASSED
10/4/2012 3:14:30 PM, INFO : Running System Property Check: OS version must be Windows XP, Windows 2003 or later...
10/4/2012 3:14:30 PM, INFO : System Property Check: OS version must be Windows XP, Windows 2003 or later - PASSED
10/4/2012 3:14:30 PM, INFO : Running System Property Check: The operating system must be activated...
10/4/2012 3:14:30 PM, INFO : Product type: 10
10/4/2012 3:14:30 PM, INFO : System Property Check: The operating system must be activated - PASSED
10/4/2012 3:14:30 PM, INFO : Entered Custom Setup page
10/4/2012 3:14:36 PM, INFO : Clicked Cancel button
10/4/2012 3:14:41 PM, INFO : Regretted cancellation of the bootstrapper
10/4/2012 3:14:42 PM, INFO : Selected CONSOLE installation
10/4/2012 3:14:42 PM, INFO : Changed installation value: SERVER_COMPUTERNAME="G2-AV"
10/4/2012 3:14:42 PM, INFO : Verifying SUM MSI version is higher than installed SUM version
10/4/2012 3:14:42 PM, INFO : Found MSI: C:\sec_50\ServerInstaller\SUM.msi version: 1
10/4/2012 3:14:42 PM, INFO : Found installed component: {2C7A82DB-69BC-4198-AC26-BB862F1BE4D0} version: 1
10/4/2012 3:14:42 PM, INFO : Selected DATABASE installation
10/4/2012 3:14:42 PM, INFO : Running System Property Check: User must be an administrator on this computer...
10/4/2012 3:14:42 PM, INFO : System Property Check: User must be an administrator on this computer - PASSED
10/4/2012 3:14:42 PM, INFO : Running System Property Check: OS version must be Windows XP, Windows 2003 or later...
10/4/2012 3:14:42 PM, INFO : System Property Check: OS version must be Windows XP, Windows 2003 or later - PASSED
10/4/2012 3:14:42 PM, INFO : Running System Property Check: The operating system must be activated...
10/4/2012 3:14:42 PM, INFO : Product type: 10
10/4/2012 3:14:42 PM, INFO : System Property Check: The operating system must be activated - PASSED
10/4/2012 3:14:42 PM, INFO : Running System Property Check: Computer browser service should be running...
10/4/2012 3:14:42 PM, INFO : Initializing the service: Browser
10/4/2012 3:14:42 PM, WARNING : System Property Check: Computer browser service should be running - FAILED
10/4/2012 3:14:42 PM, INFO : Running System Property Check: System account must be able to impersonate other accounts...
10/4/2012 3:14:42 PM, INFO : System Property Check: System account must be able to impersonate other accounts - PASSED
10/4/2012 3:14:42 PM, INFO : Running System Property Check: Machine name should not exceed 15 characters...
10/4/2012 3:14:42 PM, INFO : System Property Check: Machine name should not exceed 15 characters - PASSED
10/4/2012 3:14:42 PM, INFO : Running System Property Check: Computer should have only one network adapter to ensure that RMS binds correctly...
10/4/2012 3:14:42 PM, INFO : System Property Check: Computer should have only one network adapter to ensure that RMS binds correctly - PASSED
10/4/2012 3:14:42 PM, INFO : Running System Property Check: Computer should not have a pending reboot...
10/4/2012 3:14:42 PM, INFO : System Property Check: Computer should not have a pending reboot - PASSED
10/4/2012 3:14:42 PM, INFO : Running System Property Check: Computer should have more than 2GB RAM...
10/4/2012 3:14:42 PM, INFO : System Property Check: Computer should have more than 2GB RAM - PASSED
10/4/2012 3:14:42 PM, INFO : Running System Property Check: Operating system should support more than 5000 clients...
10/4/2012 3:14:42 PM, INFO : System Property Check: Operating system should support more than 5000 clients - PASSED
10/4/2012 3:14:42 PM, INFO : Running System Property Check: SEC 1.x, 2.0 or 3.x must not be installed on this computer...
10/4/2012 3:14:42 PM, INFO : Product is not installed on local system. Upgrade code: {AC0DE50E-751A-4081-8F5B-8DC7ACBBBD4A}
10/4/2012 3:14:42 PM, INFO : SEC 2.x is not installed on local system. MsiQueryProductState return -1
10/4/2012 3:14:42 PM, INFO : SEC 3.x is not installed on local system. MsiQueryProductState return -1
10/4/2012 3:14:42 PM, INFO : System Property Check: SEC 1.x, 2.0 or 3.x must not be installed on this computer - PASSED
10/4/2012 3:14:42 PM, INFO : Running System Property Check: Sophos Help Desk must not be installed on this computer...
10/4/2012 3:14:42 PM, INFO : Product is not installed on local system. Upgrade code: {4ED6795A-1166-4277-B059-5189544286FE}
10/4/2012 3:14:42 PM, INFO : System Property Check: Sophos Help Desk must not be installed on this computer - PASSED
10/4/2012 3:14:42 PM, INFO : Running System Property Check: Sophos Control Center 2.x must not be installed on this computer...
10/4/2012 3:14:42 PM, INFO : Product is not installed on local system. Upgrade code: {99D634CF-54AF-4FCD-8259-AF8BAA7E7FC5}
10/4/2012 3:14:42 PM, INFO : System Property Check: Sophos Control Center 2.x must not be installed on this computer - PASSED
10/4/2012 3:14:42 PM, INFO : Running System Property Check: Sophos Control Center 4.x must not be installed on this computer...
10/4/2012 3:14:42 PM, INFO : Product is not installed on local system. Upgrade code: {56993DED-E97C-45A2-BF69-068B966AEEFB}
10/4/2012 3:14:42 PM, INFO : System Property Check: Sophos Control Center 4.x must not be installed on this computer - PASSED
10/4/2012 3:14:42 PM, INFO : Running System Property Check: Simple file sharing must be disabled...
10/4/2012 3:14:42 PM, INFO : System Property Check: Simple file sharing must be disabled - PASSED
10/4/2012 3:14:42 PM, INFO : Running System Property Check: Sophos EM Console must not be installed on this computer...
10/4/2012 3:14:42 PM, INFO : Product is not installed on local system. Upgrade code: {32FF7557-4C84-4E2E-B917-EE09D8E59FDE}
10/4/2012 3:14:42 PM, INFO : System Property Check: Sophos EM Console must not be installed on this computer - PASSED
10/4/2012 3:14:42 PM, INFO : Running System Property Check: Sophos EM Library must not be installed on this computer...
10/4/2012 3:14:42 PM, INFO : Product is not installed on local system. Upgrade code: {7A81AAEB-E07D-4E38-A36B-9B91FA0BA578}
10/4/2012 3:14:42 PM, INFO : System Property Check: Sophos EM Library must not be installed on this computer - PASSED
10/4/2012 3:14:42 PM, INFO : Running System Property Check: Support operating system version and service pack must be installed...
10/4/2012 3:14:42 PM, INFO : Version: 6.1.7601 SP: 1 Architecture: 2 Suitemask: 274 Edition: 10
10/4/2012 3:14:42 PM, INFO : OS version 6.1 Service pack installed
10/4/2012 3:14:42 PM, INFO : System Property Check: Support operating system version and service pack must be installed - PASSED
10/4/2012 3:14:42 PM, INFO : Running System Property Check: Incompatible version of NAC must not be installed on this computer...
10/4/2012 3:14:42 PM, INFO : No version of NAC detected
10/4/2012 3:14:42 PM, INFO : System Property Check: Incompatible version of NAC must not be installed on this computer - PASSED
10/4/2012 3:14:42 PM, INFO : Running System Property Check: Sophos Enterprise Console must not be running...
10/4/2012 3:14:42 PM, INFO : EnterpriseConsole.exe not found in the list of processes running
10/4/2012 3:14:42 PM, INFO : System Property Check: Sophos Enterprise Console must not be running - PASSED
10/4/2012 3:14:42 PM, INFO : Running System Property Check: Sophos Enterprise Manager must not be running...
10/4/2012 3:14:42 PM, INFO : EnterpriseManager.exe not found in the list of processes running
10/4/2012 3:14:42 PM, INFO : System Property Check: Sophos Enterprise Manager must not be running - PASSED
10/4/2012 3:14:42 PM, INFO : Running System Property Check: This computer should have at least 5GB free disk space on the primary drive...
10/4/2012 3:14:42 PM, INFO : Enough space: 0 Mb
10/4/2012 3:14:42 PM, INFO : System Property Check: This computer should have at least 5GB free disk space on the primary drive - PASSED
10/4/2012 3:14:42 PM, INFO : Running System Property Check: SEC should not be installed on a Domain Controller...
10/4/2012 3:14:42 PM, INFO : The computer is not a Domain Controller
10/4/2012 3:14:42 PM, INFO : System Property Check: SEC should not be installed on a Domain Controller - PASSED
10/4/2012 3:14:42 PM, INFO : Running System Property Check: Logged on user must have rights to query the accounts used by the existing installation...
10/4/2012 3:14:42 PM, INFO : System Property Check: Logged on user must have rights to query the accounts used by the existing installation - PASSED
10/4/2012 3:14:42 PM, INFO : Running System Property Check: The server must not point to a remote database when there is an orphan database installed on local machine...
10/4/2012 3:14:42 PM, INFO : The server uses a local SQL database
10/4/2012 3:14:42 PM, INFO : System Property Check: The server must not point to a remote database when there is an orphan database installed on local machine - PASSED
10/4/2012 3:14:42 PM, INFO : Running System Property Check: .NET 3.5 SP1 must be installed and the computer restarted before installing on Windows 2008 SP1...
10/4/2012 3:14:42 PM, INFO : System Property Check: .NET 3.5 SP1 must be installed and the computer restarted before installing on Windows 2008 SP1 - PASSED
10/4/2012 3:14:42 PM, INFO : Running System Property Check: The logged on user must be able to connect to the domain controller in Active Directory...
10/4/2012 3:14:42 PM, INFO : System Property Check: The logged on user must be able to connect to the domain controller in Active Directory - UNKNOWN
10/4/2012 3:14:42 PM, INFO : Entered PreChecks page.
10/4/2012 3:14:44 PM, INFO : Entered Database page.
10/4/2012 3:14:46 PM, INFO : Checking whether account: [domain1]\administrator is local...
10/4/2012 3:14:46 PM, INFO : It is a domain account
10/4/2012 3:15:00 PM, INFO : Validating account retrived by Object picker...
10/4/2012 3:15:00 PM, INFO : Validating the user account...
10/4/2012 3:15:00 PM, INFO : The specified account is not disabled and has a password that never expires.
10/4/2012 3:15:06 PM, INFO : Validating password...
10/4/2012 3:15:07 PM, INFO : Log on succeeded with the credentials [domain1]\sophosadmin
10/4/2012 3:15:07 PM, INFO : Validating whether logged on user can access the selected sql instance...
10/4/2012 3:15:07 PM, INFO : Connection to database succeeded
10/4/2012 3:15:07 PM, INFO : Validating selected SQL instance version...
10/4/2012 3:15:07 PM, INFO : The version of the sql instance selected is valid
10/4/2012 3:15:07 PM, INFO : Validating logged on user permissions...
10/4/2012 3:15:07 PM, INFO : logged on User has permissions to create a database
10/4/2012 3:15:08 PM, INFO : Changed installation value: SERVER_USERNAMEDOMAIN="[domain1]"
10/4/2012 3:15:08 PM, INFO : Changed installation value: SERVER_USERNAME="sophosadmin"
10/4/2012 3:15:08 PM, INFO : Changed installation value: SERVER_UPN="sophosadmin@[domain1]"
10/4/2012 3:15:08 PM, INFO : Changed installation value: SERVER_USERNAMEPASSWORD="********"
10/4/2012 3:15:08 PM, INFO : Changed installation value: DATABASE_SERVERNAME="(local)\SOPHOS"
10/4/2012 3:15:08 PM, INFO : Entered Port page.
10/4/2012 3:15:09 PM, INFO : Changed installation value: SERVER_PORT="80"
10/4/2012 3:15:09 PM, INFO : Entered Feedback page.
10/4/2012 3:15:11 PM, INFO : Feedback not agreed.
10/4/2012 3:15:11 PM, INFO : Changed installation value: SERVER_FEEDBACKENABLED="0"
10/4/2012 3:15:12 PM, INFO : Changed installation value: SERVER_FEEDBACKENABLED="0"
10/4/2012 3:15:12 PM, INFO : Entered Ready to Modify page.
10/4/2012 3:15:13 PM, INFO : Entered Progress page.
10/4/2012 3:15:13 PM, INFO : Added copy SmAgentAPI.dll to the list of commands
10/4/2012 3:15:13 PM, INFO : Processing C:\sec_50\ServerInstaller\Database64.msi with the commands: DATABASE_SERVERNAME="(local)\SOPHOS" DATABASE_USERNAME="sophosadmin" DATABASE_USERNAMEDOMAIN="[domain]" INSTALLDIR="C:\Program Files\Sophos" REBOOT="ReallySuppress" REINSTALLMODE=vomus REINSTALL=ALL
10/4/2012 3:15:13 PM, INFO : Added Database installation to the list of commands
10/4/2012 3:15:13 PM, INFO : Processing C:\sec_50\ServerInstaller\Server64.msi with the commands: DATABASE_SERVERNAME="(local)\SOPHOS" SERVER_USERNAME="sophosadmin" SERVER_USERNAMEDOMAIN="[domain]" SERVER_UPN="sophosadmin@[domain1]" SERVER_USERNAMEPASSWORD="********" SERVER_PORT="80" SERVER_FEEDBACKENABLED="0" INSTALLDIR="C:\Program Files\Sophos" INSTALLDIR32="C:\Program Files (x86)\Sophos" SUM_INSTALLDIR="C:\Program Files (x86)\Sophos\Update Manager" BASE64_ENCODED_PASSWORDS="1" REBOOT="ReallySuppress" REINSTALLMODE=vomus REINSTALL=ALL
10/4/2012 3:15:13 PM, INFO : Added Management Server installation to the list of commands
10/4/2012 3:15:13 PM, INFO : Processing C:\sec_50\ServerInstaller\Console64.msi with the commands: SERVER_UPN="sophosadmin@[domain1]" SERVER_PORT="80" SERVER_COMPUTERNAME="G2-AV" INSTALLDIR="C:\Program Files\Sophos" INSTALLDIR32="C:\Program Files (x86)\Sophos" REBOOT="ReallySuppress" REINSTALLMODE=vomus REINSTALL=ALL
10/4/2012 3:15:13 PM, INFO : Added Management Console installation to the list of commands
10/4/2012 3:15:13 PM, INFO : Start state: Idle
10/4/2012 3:15:13 PM, INFO : Deactivate state: Idle
10/4/2012 3:15:13 PM, INFO : Activate state: Installing
10/4/2012 3:15:13 PM, INFO : Verifying files in folder
10/4/2012 3:15:13 PM, INFO : Target folder verification completed successfully
10/4/2012 3:15:13 PM, INFO : Copied SmAgentAPI.dll from C:\sec_50\ServerInstaller\pre-reqs\SmAgent\SmAgentAPI.dll into C:\Program Files (x86)\Business Objects\BusinessObjects Enterprise 11\win32_x86\plugins\auth\secLDAP\SmAgentAPI.dll
10/4/2012 3:15:13 PM, INFO : Verifying files in folder
10/4/2012 3:15:13 PM, INFO : Target folder verification completed successfully
10/4/2012 3:15:13 PM, INFO : About to install Database64.msi
10/4/2012 3:15:16 PM, INFO : Processing INSTALLMESSAGE_TERMINATE message from MSI
10/4/2012 3:15:16 PM, INFO : Ended installing Database64.msi
10/4/2012 3:15:16 PM, INFO : Processing INSTALLMESSAGE_INSTALLEND message from MSI
10/4/2012 3:15:16 PM, INFO : Installation of Database succeeded
10/4/2012 3:15:16 PM, INFO : Verifying files in folder
10/4/2012 3:15:16 PM, INFO : Target folder verification completed successfully
10/4/2012 3:15:16 PM, INFO : About to install Server64.msi
10/4/2012 3:15:17 PM, INFO : Processing INSTALLMESSAGE_TERMINATE message from MSI
10/4/2012 3:15:17 PM, INFO : Installation of Server64.msi failed with error code: 1603
10/4/2012 3:15:17 PM, INFO : Ended installing Server64.msi
10/4/2012 3:15:17 PM, INFO : Processing INSTALLMESSAGE_INSTALLEND message from MSI
10/4/2012 3:15:17 PM, INFO : Installation of Management Server failed with error code: 1603
10/4/2012 3:15:17 PM, INFO : Deactivate state: Installing
10/4/2012 3:15:17 PM, INFO : Activate state: Failed
10/4/2012 3:15:17 PM, INFO : Entered Installation failed page.
10/4/2012 3:15:23 PM, INFO : Finished Bootstrapper
10/4/2012 3:15:23 PM, INFO : Cleaned up socket.
10/4/2012 3:15:23 PM, INFO : Uninitialized COM in main thread
Yes, the computer browser message is more of a warning.
So the Server MSI failed:
"Installation of Server64.msi failed with error code: 1603"
So now you need to find the "Sophos_Server[64|32]msi [timestamp].log" log file in the same directory. Check the timestamps match with the bootstrap.
As the log is going to be quite large. Can you search down the for string:
Return Value 3
Then paste roughly the text from 20 lines above the "Return value 3"
Regards,
Jak
Here you go, thx.
CustomAction DeobfuscatePassword returned actual error code 1603 (note this may not be 100% accurate if translation happened inside sandbox)
Action ended 15:15:17: DeobfuscatePassword. Return value 3.
Action ended 15:15:17: INSTALL. Return value 3.
Property(S): UpgradeCode = {C2419059-C131-46CB-922A-E823587552BA}
Property(S): SERVER_FEEDBACKENABLED = #1
Property(S): SERVER_USERNAMEDOMAIN = [domain1]
Property(S): SERVER_USERNAME = administrator
Property(S): SUM_INSTALLDIR = C:\Program Files (x86)\Sophos\Update Manager
Property(S): SUM_USERNAME = [domain1]\administrator
Property(S): SOPHOSPATCHCONNECTIONSTRING = Data Source=(local)\SOPHOS;Initial Catalog=SOPHOSPATCH;Integrated Security=SSPI;Connect Timeout=60
Property(S): SOPHOSPATCHCOMMANDTIMEOUT = 180
Property(S): MSMQSERVICEINSTALLED = #1
Property(S): OBFUSCATEDSUMPASSWORD = **********
Property(S): OBFUSCATEDSERVERPASSWORD = **********
Property(S): MANAGEMENTSERVERCONNECTIONSTRING = Provider=SQLOLEDB;Integrated Security=SSPI;Initial Catalog=SOPHOS50;Data Source=(local)\SOPHOS;
Property(S): NETFRAMEWORK20INSTALLROOTDIR64 = C:\Windows\Microsoft.NET\Framework64\v2.0.50727\
Property(S): NETFRAMEWORK30_SP_LEVEL = #2
Property(S): NETFRAMEWORK35_SP_LEVEL = #1
Property(S): NETFRAMEWORK35 = #1
Property(S): SERVER_USERNAMEPASSWORD = **********
Property(S): SERVER_UPN = sophosadmin@[domain1]
Property(S): COMMANDLINE_SERVER_USERNAME = sophosadmin
Property(S): COMMANDLINE_SERVER_USERNAMEDOMAIN = [domain1]
Property(S): COMMANDLINE_SERVER_USERNAMEPASSWORD = **********
Property(S): COMMANDLINE_SERVER_FEEDBACKENABLED = 0
Property(S): COMMANDLINE_SUM_INSTALLDIR = C:\Program Files (x86)\Sophos\Update Manager
Property(S): COMMANDLINE_SERVER_PORT = 80
Property(S): SERVER_PORT = 80
Property(S): COMMANDLINE_SERVER_UPN = sophosadmin@[domain1]
Property(S): CreateUser = **********
Property(S): INSTALLDIR = C:\Program Files\Sophos
Property(S): SystemFolder = C:\Windows\SysWOW64\
Property(S): System64Folder = C:\Windows\system32\
Property(S): ProgramMenuFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\
Property(S): CommonAppDataFolder = C:\ProgramData\
Property(S): CommonFilesFolder = C:\Program Files (x86)\Common Files\
Property(S): INSTALLDIR32 = C:\Program Files (x86)\Sophos
Property(S): ProgramFilesFolder = C:\Program Files (x86)\
Property(S): ProgramFiles64Folder = C:\Program Files\
Property(S): VersionNT = 601
Property(S): DATABASE_SERVERNAME = (local)\SOPHOS
Property(S): Privileged = 1
Property(S): Manufacturer = Sophos Limited
Property(S): ProductCode = {3886EB02-D881-4603-953B-4AE0E2A39665}
Property(S): ProductLanguage = 1033
Property(S): ProductName = Sophos Management Server
Property(S): ProductVersion = 5.0.0
Property(S): ALLUSERS = 1
Property(S): ARPCOMMENTS = Services handling updating and communication for Sophos software on networked computers.
Property(S): ARPCONTACT = Technical Support Department
Property(S): ARPPRODUCTICON = ARPIcon.ico
Property(S): ARPHELPLINK = http://www.sophos.com/support
Property(S): ARPURLINFOABOUT = http://www.sophos.com
Property(S): ARPURLUPDATEINFO = http://www.sophos.com/support/updates
Property(S): ARPHELPTELEPHONE = http://www.sophos.com/companyinfo/contacting
Property(S): ARPNOMODIFY = 1
Property(S): ARPNOREPAIR = 1
Hello S7_Edward,
you've probably missed Jak's cue paste roughly the text from 20 lines above the "Return value 3" (emphasis mine) - as it's DeobsfuscatePassword which returns the error the interesting part begins at Doing action: DeobfuscatePassword.
Christian
HI,
Well I think I know what the problem is.
It's down to the registy key(s) under:
hklm\software\[wow6432node]\sophos\EE\Management Tools\DatabaseUser\
The installer is trying to de-obfuscate the password as stored in the registry. Can you check that under:
hklm\software\[wow6432node]\sophos\EE\Management Tools\DatabaseUser\
That those keys are expected?
Do you have UseClearText set to 1?
If your SQL instance is local to the Sophos Management Service, I.e. everything is installed on the same machine, the management service in SEC 4.x doesn't need to impersonate a user to access the database. It does in SEC 5. but during the upgrade you will be prompted for a database account.
So you could, do a backup first of the DatabaseUser key to be safe, then delete:
hklm\software\[wow6432node]\sophos\EE\Management Tools\DatabaseUser\
then perform the upgrade. When installing 5 it will just ask you for the account again.
THis KBA is related:
http://www.sophos.com/en-us/support/knowledgebase/116519.aspx
Regards,
Jak
Thx jak. Yes, I posted the 30 lines after, sorry.
Everything is local.
In that regkey I have 'administrator' and the administrator password (not encrypted) and the 'UseClear Text = 1' key. The thing I want to do is reinstall using a sophosadmin user instead of administrator. If I delete the key won't it need the same one again or will it allow me to use the sophosadmin user on reinstall?
Hi,
Well if you like, you could re-obfuscate the current password and set the usecleartext back to 0
To do so:
1. Copy C:\sec_50\tools\ObfuscationUtil.exe to the Enterprise Console directory, e.g. C:\Program Files (x86)\Sophos\Enterprise Console\
2. In a command prompt, CD to:
C:\Program Files (x86)\Sophos\Enterprise Console\
3. Run:
ObfuscationUtil.exe -w --obfuscate password
changing password for the password you use.
4. Copy this generated string to the registry key holding the password and revert usecleartext to 0
5. Check that the management service can restart ok.
6. Re-run the modify.
Regards,
Jak
What does it say in the application event log when the management service fails to start?
Is the reason that you're changing the account because there is a problem with it? I assume this account can logon to the management server for example?
So if you're using a domain account for the database account the values should be as follows for the account:
Regards,
Jak
