Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 21 replies
  • Subscribers 1 subscriber
  • Views 32702 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

4.5. to 5.1 SEC upgrade - SEC and SEC DB Server on same DC?

NikolaFBA

I need your help!
Unlike in this video:

http://www.youtube.com/watch?v=OHjORAfwP-8

I have on the same DC1 SEC and SEC DB Server. Will that make problem during 4.5. to 5.1 SEC upgrade?
Thanx ina advance for your help and answer!

Regards!

Nikola

P.S. What would be the best thing to do? Can we install SEC Server cosnole on other DC and update DB on
DC1?

:41193


This thread was automatically locked due to age.
  • 0

    Hello Christian,

    Thank you for your brief response!

    Under Update managers there are no errors.

    From tasklist of DC! and DC3 i see active tasks

    SophosUpdateMgr.exe         8976 Services                0     49.360 K for DC3

    SophosUpdateMgr.exe         5696 Console                 0     10.904 K for DC1

    Maybe they are updating right now after I've initiate the same several times?

    Do you know what can be a problem with new computer I've

    installed Sophos on it (the one that doesn't shows)?

    I hope I've missed seeing it.:)

    Thanx!

    Nikola

    :42332
  • 0

    Here is screen shot:

    DC1 updates from Source Sophos. Its Source details are: Address: Sophos, usrename: em(then 6 digits) (don't know

    is it secure to write it:)). maybe this is the cause of probem... DC3 updates from DC1. Source and address: \\..-DC1\SophosUpdate username: ...\SophosUpdateMgr. All actions under Subscriptions tab are disabled.:(

    No, Subscription seems alright to me:

    Here is Subscriptions and Distribution for DC1:

    For DC3:

    :42334
  • 0

    Hello Nikola,

    if the credentials (a public forum is never secure) were the problem you'd see an error.

    All actions under Subscriptions tab are disabled

    They aren't - << is active, meaning move all from Subscribed to: to Available:, others will become active if you select one of the subscriptions, but that's UI details.

    Configuration looks ok, but something is stuck. If you request Update now the Download status should change - I understand it doesn't. I assume you have rebooted since - or haven't you?

    I'd start with the SUMTrace logs. If they are not recent, then the Update Manager service is likely stuck and you should restart it. Otherwise there might be an internal communication error. The SUMs should also be in the endpoints view, please check the Last message time in the Computer details tab.  

    You say the clients are updating? If they are on 10.0.10 VDL4.91 they should show 467 IDEs right now. If this is the case then the SUMs do indeed work but SEC internal communication has an issue.

    Christian

    :42338
  • 0

    Hello Christian,

    yes, they are 467. SUMTrace logs show recent activity. 

    So, you are saying, that under Subscriptions for both DCs

    i need to put Recommended and Windows 2000 and above

    under Subscribed to: So under Available there will be none,

    and under Subscriptions for both DCs and Windows 2000...

    and Recommended? After upgrade to Enterprise console

    5.1 I've as I recall restarted once, but I think that was as part

    of installation? Maybe to restart Update service instead?

    Thank you for your help!

    Regards,

    Nikola

    :42340
  • 0

    Hello Nikola,

    DC3 would have to subscribe to Windows 2000 and above only if the endpoints it serves need it (BTW: did you create it or has it "magically" appeared? Also I'd suggest changing the Recommended subscription to 10.2).

    Anyway there seems to be no issue with SUM but "just" with internal communication. Normally it's more or less safe to restart the various services individually. I'd try the Sophos Agent service first. After it is restarted request an Update now. If the Download status doesn't change after some seconds restart the Sophos Update Manager service.

    Christian

    :42358
  • 0

    Hello Christian!

    Windows and 2000 and above only was created before, of course.:)

    I'll try with services.

    Thank you!

    Nikola

    :42396
  • 0

    Restart of services didn't help.

    In SumTrace log what does this mean:

    2013-08-08 11:32:20 : GatherCurrencyData&colon; Considering payload Payload-Sub3...
2013-08-08 11:32:20 : GatherCurrencyData&colon; Payload version information has changed, proceeding.
2013-08-08 11:32:20 : GatherCurrencyData&colon; Obtaining currency data...
2013-08-08 11:32:21 : GatherCurrencyData&colon; ReleaseHasRole(EPS) threw an exception, returning false.  Details: Attribute not found.
2013-08-08 11:32:21 : GatherCurrencyData&colon; No relevant attributes found for this payload.

    ? 

    Thanks!

    :42402
  • 0

    Hello Nikola,

    I can see the same messages - whatever they mean they are not related to your issue ...

    You still see no change in the Update managers view but SUM seems to be working and your clients appear up to date? Please take a look in the agent logs (on both servers). There should be blocks of lines labeled 51D0 I starting with SDDMA: and SDDM,, one of them containing the SUM status in XML format (you'll find the same information in the extensionless file SDDM Status under ...\Agent\Adapter Storage\SDDM\).

    As these messages go through RMS they might be stuck there. Are there many files in the ...\Router\Envelopes\ folder? Maybe you missed my question about messaging, especially from the SUMs: In SEC's Endpoints view, tab Computer Details - what is the Last message time for your servers (DC1 and DC3). If it is not current the restart the Sophos Message Router service.

    Christian

    :42410
  • 0

    Hello Christian,

    There is no change. I've restared Sophos Message Router service

    on both servers. I've changed Recommended subscription to 10.2.

    Under ...\Router\Envelopes\ folder on DC3 there are no files,

    under the same folder on DC1 there is 804KB of messages.

     In SEC's Endpoints view, tab Computer Details for both servers

    last message is time of DC3 Update manager last update

    7/16/2013.

    Thanks!

    Nikola

    :42440
  • 0

    Hello Nikola,

    so the issue is with RMS on DC1.

    804KB of messages

    size doesn't matter :smileyvery-happy: - how many files and is the number constant? If you sort them newest first is there "activity" in the top items (names and times change meaning old files are deleted and new ones created)?

    I suggest the following on DC1:

    • stop the Message Router
    • move the .msg files somewhere else
    • restart the Message Router
    • watch the envelopes folder
    • check if there is any change in the console
    • if not, stop the Message Router and check the latest Router log. It should have Sophos Messaging Router 3.4.1.3411 starting... near the top. Please post the first 20 lines or so. If they do not contain the lines Host name: and Local IP addresses: search for these, they should be followed by a few Resolved ...  lines and eventually you should see Waiting for messages... and a little bit farther down Logged on EM as a client. 
    • If you can't find these lines please post anything which looks like an error

    Christian

    :42442