Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 3 replies
  • Subscribers 1 subscriber
  • Views 11147 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Redirecting endpoints to new Enterprise Console

N00b

Hi

I'm trying to run the script from http://www.sophos.com/en-us/support/knowledgebase/116737.aspx. to redirect our endpoints from one Enterprise Console to a new Console.  I've entered the relevant config but each time I run the script I get an error "Router is a server router, will exit"

Full log:

10/10/2014 10:24:55 INFO: Starting Script
10/10/2014 10:24:55 INFO: Options:
10/10/2014 10:24:55 INFO: blnForceRMSRun : False
10/10/2014 10:24:55 INFO: blnForcePatchRun : False
10/10/2014 10:24:55 INFO: blnReconfigurePatch : False
10/10/2014 10:24:55 INFO: blnReconfigureRMS : True
10/10/2014 10:24:55 INFO: strSECGroupPathOut :
10/10/2014 10:24:55 INFO: intPauseForServiceInSeconds : 10
10/10/2014 10:24:55 INFO: blnWriteCacToSAUCache : True
10/10/2014 10:24:55 INFO: strLogPath : C:\windows\temp\SophosReInit.txt
10/10/2014 10:24:55 INFO: strReInitLog : C:\windows\temp
10/10/2014 10:24:55 INFO: strManagementServerPort :
10/10/2014 10:24:55 INFO: strManagementServer :
10/10/2014 10:24:55 INFO: --> Is64()
10/10/2014 10:24:55 INFO: Platform is 64-Bit
10/10/2014 10:24:55 INFO: <-- Is64()
10/10/2014 10:24:55 INFO: --> MarkerFound()
10/10/2014 10:24:55 INFO: Script not already run.
10/10/2014 10:24:55 INFO: <-- MarkerFound()
10/10/2014 10:24:55 INFO: --> ServerClassRouter()
10/10/2014 10:24:55 ERROR: Router is a server router, will exit
10/10/2014 10:24:55 INFO: <-- ServerClassRouter()
10/10/2014 10:24:55 INFO: End of script
10/10/2014 10:24:55 INFO: --> CloseLog() - No function exit logged

I've had a look through other threads and they suggest either the script isn't run as Admin (this is) or there is an issue in the registry (taken from another thread): 

"The script checks the registry key:

HKEY_LOCAL_MACHINE\SOFTWARE\[Wow6432Node]\Sophos\Messaging System\Router\connectioncache.

On a client this is 10.  

On one of the above it is 20512.  As it is typically unwanted to redirect a management server or relay, the script exists if the value is not 10."

This key doesn't exist in the registry.

Can anyone give me any advice please?  Thank you :-)

:53927


This thread was automatically locked due to age.
  • 0

    Hi,

    I suspect that it's a permissions problem being able to read the key.

    If you launch a command prompt running as admin.

    Then run:

    cscript SophosReint.vbs

    I suspect it will be ok.

    Regards,

    Jak

    :53929
  • 0

    Thank you Jak.  I've done as you suggested which provided more information in the log file, but ultimately didn't work.  I've attached the new log file.  It looks like it's unable to delete the keys? 

    :53935
  • 0

    Hello, It looks like the script completed ok.

    Is the problem that the computer does not appear in SEC as it should?

    Does the new router log of the client give you anything to go on?

    Did the client obtain new certificates following the re-init: i.e. under:

    HKLM\SOFTWARE\Wow6432Node\Sophos\Messaging System\Router\Private\

    there should be a pkc and pkp value.

    Following the router getiing a certificate, there should be a pkc and pkp under:

    HKLM|SOFTWARE\Wow6432Node\Sophos\Remote Management System\ManagementAgent\Private\

    only if both of these conditions are met would you expect for the client to appear as managed.

    Does the new parentaddress registry key (HKLM\SOFTWARE\Wow6432Node\Sophos\Messaging System\) on the client address the correct management server?

    It looks like the script did all it can, so either there is a problem with the client or the script was fed the wrong files for the management server?

    Regards,

    Jak

    :53945