how to fix sophos endpoint installation failed ?

The first step is to look at the log file for the installer:

C:\ProgramData\Sophos\CloudInstaller\Logs\

This covers the pre-check, the download and then install phase.

From there it might show that the failure was to install ComponentX.  From there you can look at the logs of that component which should be in the %temp% directory of the account that ran the installer.

Regards,

Jak

Ok and how to fix ?

Ok and how to fix ?

Well that depends on the problem.  What's in the log file?

friendly , the setup can't complete install more than 20% 

I’m not sure what that means. Can you attach the log file?

I´m having the same issue.

My log file is:

Started C:\Users\LOCALA~1\AppData\Local\Temp\sfl-ae1a8200\Setup.exe
2019-05-14T14:02:15.4703413Z INFO : Stage 1 command-line options:
2019-05-14T14:02:15.4713413Z INFO : ---
2019-05-14T14:02:15.4713413Z INFO : Quiet mode on: 0
2019-05-14T14:02:15.4713413Z INFO : Automatic Proxy detection disabled: 0
2019-05-14T14:02:15.4713413Z INFO : No feedback mode on: 0
2019-05-14T14:02:15.4713413Z INFO : Dump feedback enabled: 0
2019-05-14T14:02:15.4713413Z INFO : Bypass competitor removal: 0
2019-05-14T14:02:15.4713413Z INFO : Using CRT catalog file path: --
2019-05-14T14:02:15.4713413Z INFO : Only register endpoint with Central: 0
2019-05-14T14:02:15.4713413Z INFO : Log messages between endpoint and Central: 0
2019-05-14T14:02:15.4713413Z INFO : Log command-line passed to executables: 0
2019-05-14T14:02:15.4713413Z INFO : Using custom server: --
2019-05-14T14:02:15.4713413Z INFO : Using custom stage 2 filename: --
2019-05-14T14:02:15.4713413Z INFO : Using cloud user: --
2019-05-14T14:02:15.4713413Z INFO : Using cloud group: --
2019-05-14T14:02:15.4723413Z INFO : Overriding computer name: --
2019-05-14T14:02:15.4723413Z INFO : Overriding computer description: --
2019-05-14T14:02:15.4723413Z INFO : Overriding domain name: --
2019-05-14T14:02:15.4723413Z INFO : Language will be set to: --
2019-05-14T14:02:15.4723413Z INFO : Using message relays: --
2019-05-14T14:02:15.4723413Z INFO : Proxy address: --
2019-05-14T14:02:15.4723413Z INFO : Proxy user name: --
2019-05-14T14:02:15.4723413Z INFO : Using custom customer token: --
2019-05-14T14:02:15.4723413Z INFO : Using specified products: --
2019-05-14T14:02:15.4723413Z INFO : Using certificates from the MCS app data folder: 0
2019-05-14T14:02:15.4723413Z INFO : ---
2019-05-14T14:02:15.4933413Z INFO : Sending HTTP 'GET' request to: full/central/windows/business/installer/latest.tar.gz
2019-05-14T14:02:17.7553413Z WARNING : WinHttpGetProxyForUrl returned: 12180
2019-05-14T14:02:17.7563413Z INFO : Attempting to connect using proxy '' of type 'Empty Proxy'.
2019-05-14T14:02:17.7563413Z INFO : Set security protocol: 00000800
2019-05-14T14:02:17.7573413Z INFO : Opening connection to downloads.sophos.com
2019-05-14T14:02:17.7613413Z INFO : Request content size: 0
2019-05-14T14:02:20.3933413Z ERROR : WINHTTP_CALLBACK_STATUS_SECURE_FAILURE: 8
2019-05-14T14:02:20.3933413Z INFO : WINHTTP_CALLBACK_STATUS_SECURE_FAILURE: WINHTTP_CALLBACK_STATUS_FLAG_INVALID_CA
2019-05-14T14:02:20.3943413Z ERROR : WinHttpSendRequest failed with certificate check failure and error 12175
2019-05-14T14:02:20.3943413Z INFO : Failed to connect using proxy '' with error: WinHttpSendRequest failed: certificate check failure
2019-05-14T14:02:20.3953413Z INFO : Cleaning up extracted files
2019-05-14T14:02:25.5323413Z INFO : Legal info link clicked
2019-05-14T14:03:23.3793413Z INFO : FindMainWindow: pid=0
2019-05-14T14:03:23.3933413Z ERROR : Exception: Failed to download stage-2 archive. Status code: --: Failed to connect with any proxy: certificate check failure

Hello Bruno Novis 

When installing the Sophos Endpoint on a Windows computer and the error below (as your logs show):

ERROR : Exception: Failed to download stage-2 archive. Status code: --: Failed to connect with any proxy: certificate check failure

usually means that TLS 1.2 is not enabled on the endpoint.

The article here should help: Sophos Central Endpoint: Installation Failed - Failed to download the installer

I check and it is enabled.

Hello Bruno Novis 

Please check the registry key mentioned in the article: Sophos Central Endpoint: Installation Failed - Failed to download the installer

If that does not resolve, please look into this: Sophos Central Endpoint: Installation fails on TLS 1.0 disabled servers

Thanks

I would suggest to run Wireshark to create a packet capture, then:

1. Look at the client hello to see the version of TLS

2. Follow the stream of the secure connection, do you see maybe a third party certificate reference, could it be that you have some Cloud based web proxy that is inspecting the traffic?

Regards,

Jak

Hi Guys.

Thanks for your support. I was able to install it after getting in contact with internet provider.

The changed the firewall certificates and it worked.