Thread Info
  • Locked Locked
  • Replies 6 replies
  • Subscribers 14 subscribers
  • Views 2989 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos Central Endpoint deployment

EREAFSN ICT1

Hi everyone, 
I hope everyone is well and healthy.

We have recently renewed our Sophos licenses from Sophos SEC to Sophos Central with Intercept X advanced and I am currently in charge of deploying this to our endpoint devices.
We using SCCM for that sort of deployment and sophos agent has been packaged. The task run the SophosSetup.exe as a part of the package, its deployment process looks to run fine but end up with an error and does not complete installation of the product.

Please note: Clients machine have TLS1.2 enabled and I am only testing on machine which does not have the old Sophos Agent.

 

I have checked the C:\ProgramData\Sophos\CloudInstaller\Logs and could spot the following lines:

WARNING : WinHttpGetProxyForUrl returned: 12180
INFO : Attempting to connect using proxy '' of type 'Empty Proxy'.
INFO : Set security protocol: 00000800
INFO : Opening connection to dzr-api-amzn-us-west-2-fa88.api-upe.p.hmr.sophos.com
INFO : Request content size: 30
INFO : Sending request
INFO : Request sent
INFO : Sending request
INFO : Request sent
INFO : Response status code: 200
INFO : Response data size: 174
INFO : trySendRequestThroughPotentialProxy returning response with status code: 200
INFO : Parsing message received for Stage 2 filename: '{"mcs_server":"dzr-mcs-amzn-us-west-2-fa88.upe.p.hmr.sophos.com","stage2_filename":"stage2-1.9.100.0-47a8945486d1c4f46a3cdc3ce4780b93c70b710fc3543553b07c5ddd1f3f8fc3.tar.gz"}'
INFO : Sending HTTP 'GET' request to: full/central/windows/business/installer/stage2-1.9.100.0-47a8945486d1c4f46a3cdc3ce4780b93c70b710fc3543553b07c5ddd1f3f8fc3.tar.gz

Does it mean that we need to allow dzr-api-amzn-us-west-2-fa88.api-upe.p.hmr.sophos.com through our firewall/proxy?

Let me know if you can help me identifying the cause of our issue.
thank you.

Florian



This thread was automatically locked due to age.
Parents

  • Hi  

    Can you please confirm if the ports and domains mentioned in the following KB article can be accessed in your environment? https://support.sophos.com/support/s/article/KB-000035367?language=en_US

    Thanks,
    Yashraj Singha
    Manager | Global Community Support
    Are you a Sophos Partner? | Product Documentation | @SophosSupport | Sign up for SMS Alerts
    If a post solves your question, please use the "Verify Answer" button.
    The New Home of Sophos Support Videos!  - Visit Sophos Techvids
  • in reply to Yashraj S

    Hi Yashraj,

    We have now added the relevant address and it looks to me that we can now reach dzr-mcs-amzn-us-west-2-fa88.upe.p.hmr.sophos.com. See log below:

    2020-09-07T23:47:04.0551175Z INFO : Sending HTTP 'POST' request to: sophos/management/ep/install/deployment-info/3
    2020-09-07T23:47:04.0551175Z WARNING : WinHttpGetProxyForUrl returned: 12180
    2020-09-07T23:47:04.0551175Z INFO : Attempting to connect using proxy '' of type 'Empty Proxy'.
    2020-09-07T23:47:04.0551175Z INFO : Set security protocol: 00000800
    2020-09-07T23:47:04.0551175Z INFO : Opening connection to dzr-mcs-amzn-us-west-2-fa88.upe.p.hmr.sophos.com
    2020-09-07T23:47:04.0551175Z INFO : Sending request for connection confirmation through potential proxy
    2020-09-07T23:47:04.0551175Z INFO : Request content size: 0
    2020-09-07T23:47:06.2113680Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
    2020-09-07T23:47:06.2113680Z INFO : Certificate check succeeded
    2020-09-07T23:47:06.2113680Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
    2020-09-07T23:47:06.3988690Z INFO : Response status code: 200
    2020-09-07T23:47:06.3988690Z INFO : Response data size: 168
    2020-09-07T23:47:06.3988690Z INFO : trySendRequestThroughPotentialProxy returning response with status code: 200
    2020-09-07T23:47:06.3988690Z INFO : Request content size: 1352
    2020-09-07T23:47:06.3988690Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
    2020-09-07T23:47:06.3988690Z INFO : Certificate check succeeded
    2020-09-07T23:47:06.3988690Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
    2020-09-07T23:47:06.6019928Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
    2020-09-07T23:47:06.6019928Z INFO : Certificate check succeeded
    2020-09-07T23:47:06.6019928Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
    2020-09-07T23:47:06.6019928Z INFO : Response status code: 200
    2020-09-07T23:47:06.6019928Z INFO : Response data size: 279
    2020-09-07T23:47:06.6019928Z INFO : Parsing message received for deployment token: {"registrationToken":"0ab27e7c30fcabc91952ed0d8e0da3973663457884ca3db2d3c420678a4feedf","dciFileName":"db95fbd4daf3e97e8ef9ef916ce966f4","products":[{"product":"DEVICE_ENCRYPTION","supported":true,"reasons":[]},{"product":"INTERCEPT_ADVANCED_EDR","supported":true,"reasons":[]}]}
    2020-09-07T23:47:06.6019928Z INFO : Model::token value changed to: 0ab27e7c30fcabc91952ed0d8e0da3973663457884ca3db2d3c420678a4feedf
    2020-09-07T23:47:06.6176245Z INFO : Licenses available: DEVICE_ENCRYPTION INTERCEPT_ADVANCED_EDR
    2020-09-07T23:47:06.6801277Z INFO : Running System Property Check: InstallationInProgress ...
    2020-09-07T23:47:06.6801277Z INFO : System Property Check: InstallationInProgress - PASSED
    2020-09-07T23:47:06.7426179Z INFO : Running System Property Check: SafeGuardEncryption ...
    2020-09-07T23:47:06.7426179Z INFO : Entered installedProductCode, upgradeCode={BA2F47D3-1C17-40E7-8DE7-1CD733442B6C}
    2020-09-07T23:47:06.7426179Z INFO : Product is not installed
    2020-09-07T23:47:06.7426179Z INFO : licensesContainFeature(DEVICE_ENCRYPTION): true
    2020-09-07T23:47:06.7426179Z INFO : System Property Check: SafeGuardEncryption - PASSED

    I am not totally sure if the installation will happen later on but log is saying that the product is not installed and everything else looks fine.

    Do you have any ideas? What are your thoughts?
    Regards
    Florian 

  • in reply to EREAFSN ICT1

    Hi  

    Are you able to see Sophos Endpoint in your taskbar window somewhere near your volume control? If so, then please open the endpoint > click "About" > Open Endpoint Self Help Tool. Here you will be able to see if everything is installed correctly or not.

    Thanks,
    Yashraj Singha
    Manager | Global Community Support
    Are you a Sophos Partner? | Product Documentation | @SophosSupport | Sign up for SMS Alerts
    If a post solves your question, please use the "Verify Answer" button.
    The New Home of Sophos Support Videos!  - Visit Sophos Techvids
  • in reply to Yashraj S

    Thank you ,

     

    We now have successfully installed one client but that was only by running the SophosSetup.exe manually.

    Deployment via SCCM did not succeed, that had only create the sophos folder with the cloudinstaller log file.

     Here is how I have deployed Sophos via SCCM (see link: https://support.sophos.com/support/s/article/KB-000035049?language=en_US)

    1. Copy the file SophosSetup.exe to a shared location which is accessible by the computers you wish to install to.
    2. Launch SCCM and navigate to Software Library, select Application Management, and choose Packages.
    3. Right-click on Packages and select Create Package.
    4. On the Package page of the Create Package and Program Wizard, specify the following information as required:

    Name: Sophos Central Managed Endpoint

    1. Check This package contains source files. Click Browse to open the Set Source Folder dialog box where you can specify the location of the installer file SophosSetup.exe which was setup in Step 3.
    2. Click next for Standard program type and enter the following information:

    Name: SophosSetup.exe
    Command Line: SophosSetup.exe
    Note: An example command line might be: SophosSetup.exe
    Program can run: Only when a user is logged on
    Run mode: Run with administrative rights
    Drive mode: Runs with UNC name
    Run and Start-up fields are optional

    1. On the Requirements section, create a requirement rule that the package runs only on supported Windows platforms.
    2. Complete the wizard to finish creating the package.
    3. The package is now ready to be deployed to your computers.
    4. Distribute to all DPs, wait for it and run a test deployment on Pilot (use deployment required).
    5. Add a task in the task sequence

    This also require TLS 1.2 enabled on client. A quick workaround is to deploy the registry key via an application. (I have checked that part and this gets deployed too)

    Let me know if you can think about anything I have missed.


    Full log below:

    2020-09-08T23:52:57.9557072Z INFO : Stage 1 command-line options:
    2020-09-08T23:52:57.9557072Z INFO : ---
    2020-09-08T23:52:57.9557072Z INFO : Quiet mode on: 0
    2020-09-08T23:52:57.9557072Z INFO : Automatic Proxy detection disabled: 0
    2020-09-08T23:52:57.9557072Z INFO : No feedback mode on: 0
    2020-09-08T23:52:57.9557072Z INFO : Dump feedback enabled: 0
    2020-09-08T23:52:57.9557072Z INFO : Bypass competitor removal: 0
    2020-09-08T23:52:57.9557072Z INFO : Using CRT catalog file path: --
    2020-09-08T23:52:57.9557072Z INFO : Only register endpoint with Central: 0
    2020-09-08T23:52:57.9557072Z INFO : Log messages between endpoint and Central: 0
    2020-09-08T23:52:57.9557072Z INFO : Log command-line passed to executables: 0
    2020-09-08T23:52:57.9557072Z INFO : Using custom server that hosts the installer stage2 filename : --
    2020-09-08T23:52:57.9557072Z INFO : Using cloud group: --
    2020-09-08T23:52:57.9557072Z INFO : Overriding computer name: --
    2020-09-08T23:52:57.9557072Z INFO : Overriding computer description: --
    2020-09-08T23:52:57.9557072Z INFO : Overriding domain name: --
    2020-09-08T23:52:57.9557072Z INFO : Language will be set to: --
    2020-09-08T23:52:57.9557072Z INFO : Using message relays: --
    2020-09-08T23:52:57.9557072Z INFO : Proxy address: --
    2020-09-08T23:52:57.9557072Z INFO : Proxy user name: --
    2020-09-08T23:52:57.9557072Z INFO : Using custom customer token: --
    2020-09-08T23:52:57.9557072Z INFO : Using specified products: --
    2020-09-08T23:52:57.9713299Z INFO : Using certificates from the MCS app data folder.: 0
    2020-09-08T23:52:57.9713299Z INFO : Using custom customer ID.: --
    2020-09-08T23:52:57.9713299Z INFO : Using specified user ID.: --
    2020-09-08T23:52:57.9713299Z INFO : Using local install source.: --
    2020-09-08T23:52:57.9713299Z INFO : Using experimental SRV.: --
    2020-09-08T23:52:57.9713299Z INFO : Invoked as part of SEC migration.: 0
    2020-09-08T23:52:57.9713299Z INFO : ---
    2020-09-08T23:52:57.9713299Z INFO : Sending HTTP 'POST' request to: api/download/stage2-details/f6c2b8c6-9163-4465-a57b-83a8a2b93155
    2020-09-08T23:52:58.0494590Z WARNING : WinHttpGetProxyForUrl returned: 12180
    2020-09-08T23:52:58.0494590Z INFO : Attempting to connect using proxy '' of type 'Empty Proxy'.
    2020-09-08T23:52:58.0807098Z INFO : Set security protocol: 00000800
    2020-09-08T23:52:58.0807098Z INFO : Opening connection to dzr-api-amzn-us-west-2-fa88.api-upe.p.hmr.sophos.com
    2020-09-08T23:52:58.0807098Z INFO : Request content size: 30
    2020-09-08T23:52:59.6588361Z INFO : Sending request
    2020-09-08T23:52:59.6588361Z INFO : Request sent
    2020-09-08T23:52:59.8463344Z INFO : Sending request
    2020-09-08T23:52:59.8619563Z INFO : Request sent
    2020-09-08T23:52:59.8619563Z INFO : Response status code: 200
    2020-09-08T23:52:59.8619563Z INFO : Response data size: 174
    2020-09-08T23:52:59.8619563Z INFO : trySendRequestThroughPotentialProxy returning response with status code: 200
    2020-09-08T23:52:59.9088362Z INFO : Parsing message received for Stage 2 filename: '{"mcs_server":"dzr-mcs-amzn-us-west-2-fa88.upe.p.hmr.sophos.com","stage2_filename":"stage2-1.9.100.0-47a8945486d1c4f46a3cdc3ce4780b93c70b710fc3543553b07c5ddd1f3f8fc3.tar.gz"}'
    2020-09-08T23:52:59.9088362Z INFO : Sending HTTP 'GET' request to: full/central/windows/business/installer/stage2-1.9.100.0-47a8945486d1c4f46a3cdc3ce4780b93c70b710fc3543553b07c5ddd1f3f8fc3.tar.gz
    2020-09-08T23:52:59.9244574Z WARNING : WinHttpGetProxyForUrl returned: 12180
    2020-09-08T23:52:59.9244574Z INFO : Attempting to connect using proxy '' of type 'Empty Proxy'.
    2020-09-08T23:52:59.9244574Z INFO : Set security protocol: 00000800
    2020-09-08T23:52:59.9244574Z INFO : Opening connection to downloads.sophos.com
    2020-09-08T23:52:59.9244574Z INFO : Request content size: 0
    2020-09-08T23:53:00.3150846Z INFO : Sending request
    2020-09-08T23:53:00.3150846Z INFO : Request sent
    2020-09-08T23:53:00.5963332Z INFO : Response status code: 200
    2020-09-08T23:53:00.5963332Z INFO : Response data size: 1792172
    2020-09-08T23:53:00.5963332Z INFO : trySendRequestThroughPotentialProxy returning response with status code: 200
    2020-09-08T23:53:00.5963332Z INFO : Extracting files:
    2020-09-08T23:53:00.5963332Z INFO : integrity.dat
    2020-09-08T23:53:00.5963332Z INFO : manifest.dat
    2020-09-08T23:53:00.5963332Z INFO : scf.dat
    2020-09-08T23:53:00.6119596Z INFO : sof.dat
    2020-09-08T23:53:00.6119596Z INFO : SophosSetup_Stage2.exe
    2020-09-08T23:53:00.6588299Z INFO : SUL.dll
    2020-09-08T23:53:00.6900807Z INFO : Management Certs/sophosca1.crl
    2020-09-08T23:53:00.6900807Z INFO : Management Certs/sophosca1.crt
    2020-09-08T23:53:00.6900807Z INFO : Management Certs/sophosca2.crl
    2020-09-08T23:53:00.6900807Z INFO : Management Certs/sophosca2.crt
    2020-09-08T23:53:00.6900807Z INFO : Management Certs/sophosca3.crl
    2020-09-08T23:53:00.6900807Z INFO : Management Certs/sophosca3.crt
    2020-09-08T23:53:00.7057070Z INFO : Management Certs/sophosca4.crl
    2020-09-08T23:53:00.7057070Z INFO : Management Certs/sophosca4.crt
    2020-09-08T23:53:00.7057070Z INFO : ManifestCerts/rootca.crl
    2020-09-08T23:53:00.7057070Z INFO : ManifestCerts/rootca.crt
    2020-09-08T23:53:00.7057070Z INFO : ManifestCerts/rootca384.crl
    2020-09-08T23:53:00.7057070Z INFO : ManifestCerts/rootca384.crt
    2020-09-08T23:53:00.7057070Z INFO : Checking manifest:C:\\Program Files (x86)\\Sophos\\CloudInstaller\\extract_cache\\manifest.dat
    2020-09-08T23:53:00.8463310Z INFO : Running setup.
    Started C:\Program Files (x86)\Sophos\CloudInstaller\SophosSetup_Stage2.exe
    2020-09-08T23:53:01.0025823Z INFO : Stage 2 command-line options:
    2020-09-08T23:53:01.0025823Z INFO : ---
    2020-09-08T23:53:01.0025823Z INFO : Parent PID: 3140
    2020-09-08T23:53:01.0025823Z INFO : Server: dzr-mcs-amzn-us-west-2-fa88.upe.p.hmr.sophos.com
    2020-09-08T23:53:01.0025823Z INFO : Message relays: --
    2020-09-08T23:53:01.0025823Z INFO : Suppressing feedback: 0
    2020-09-08T23:53:01.0025823Z INFO : Dump feedback to disk: 0
    2020-09-08T23:53:01.0025823Z INFO : Register only: 0
    2020-09-08T23:53:01.0025823Z INFO : Trail logging: 0
    2020-09-08T23:53:01.0025823Z INFO : Command-line logging: 0
    2020-09-08T23:53:01.0025823Z INFO : Bypassing competitor removal: 0
    2020-09-08T23:53:01.0025823Z INFO : CRT catalog: --
    2020-09-08T23:53:01.0025823Z INFO : Language: --
    2020-09-08T23:53:01.0025823Z INFO : Log files: C:\\ProgramData\\Sophos\\CloudInstaller\\Logs\\SophosCloudInstaller_20200908_235257.log
    2020-09-08T23:53:01.0025823Z INFO : Group: --
    2020-09-08T23:53:01.0025823Z INFO : Quiet: 0
    2020-09-08T23:53:01.0025823Z INFO : Virtual appliance: 0
    2020-09-08T23:53:01.0025823Z INFO : Proxy address: --
    2020-09-08T23:53:01.0025823Z INFO : Proxy user: --
    2020-09-08T23:53:01.0025823Z INFO : Overriding computer name: --
    2020-09-08T23:53:01.0025823Z INFO : Overriding computer description: --
    2020-09-08T23:53:01.0025823Z INFO : Overriding domain: --
    2020-09-08T23:53:01.0025823Z INFO : Disable proxy detection: 0
    2020-09-08T23:53:01.0025823Z INFO : Customer Token Specified: f6c2b8c6-9163-4465-a57b-83a8a2b93155
    2020-09-08T23:53:01.0025823Z INFO : Products: all
    2020-09-08T23:53:01.0025823Z INFO : Pipe write handle: 1868
    2020-09-08T23:53:01.0025823Z INFO : MCS Certificates Folder: 0
    2020-09-08T23:53:01.0025823Z INFO : MCS Customer Id: 9cad6e70-78bd-6488-ab1a-39c50d8a2a46
    2020-09-08T23:53:01.0025823Z INFO : User Id: --
    2020-09-08T23:53:01.0025823Z INFO : Local install source: --
    2020-09-08T23:53:01.0025823Z INFO : Name of SRV domain: --
    2020-09-08T23:53:01.0025823Z INFO : Partner Id: --
    2020-09-08T23:53:01.0025823Z INFO : Customer Estate Id: --
    2020-09-08T23:53:01.0025823Z INFO : Invoked as part of SEC migration: 0
    2020-09-08T23:53:01.0025823Z INFO : ---
    2020-09-08T23:53:01.0182157Z INFO : User name: SYSTEM
    2020-09-08T23:53:01.0182157Z INFO : NameDnsDomain: MYDOMAIN\\-4A89BB56$
    2020-09-08T23:53:01.0182157Z INFO : dnsDomain: mydomain.local
    2020-09-08T23:53:01.3150858Z INFO : NetUserGetInfo: The user name could not be found. Assuming non-Domain user.
    2020-09-08T23:53:01.3150858Z INFO : User profile loaded
    2020-09-08T23:53:01.3150858Z INFO : Model::server value changed to: dzr-mcs-amzn-us-west-2-fa88.upe.p.hmr.sophos.com
    2020-09-08T23:53:01.3150858Z INFO : Model::messageRelays value changed to be size: 0
    2020-09-08T23:53:01.3150858Z INFO : Model::group value changed to:
    2020-09-08T23:53:01.3150858Z INFO : Model::parentPid value changed to: 3140
    2020-09-08T23:53:01.3307078Z INFO : Model::products changed to: all
    2020-09-08T23:53:01.3307078Z INFO : Model::customer token value changed to: f6c2b8c6-9163-4465-a57b-83a8a2b93155
    2020-09-08T23:53:01.3307078Z INFO : MCS Crts: C:\\Program Files (x86)\\Sophos\\CloudInstaller\\Management Certs\\sophosca1.crt,C:\\Program Files (x86)\\Sophos\\CloudInstaller\\Management Certs\\sophosca2.crt,C:\\Program Files (x86)\\Sophos\\CloudInstaller\\Management Certs\\sophosca3.crt,C:\\Program Files (x86)\\Sophos\\CloudInstaller\\Management Certs\\sophosca4.crt
    2020-09-08T23:53:01.3307078Z INFO : MCS CRLs: C:\\Program Files (x86)\\Sophos\\CloudInstaller\\Management Certs\\sophosca1.crl,C:\\Program Files (x86)\\Sophos\\CloudInstaller\\Management Certs\\sophosca2.crl,C:\\Program Files (x86)\\Sophos\\CloudInstaller\\Management Certs\\sophosca3.crl,C:\\Program Files (x86)\\Sophos\\CloudInstaller\\Management Certs\\sophosca4.crl
    2020-09-08T23:53:01.3307078Z INFO : Model:: MCS customer id value changed to: 9cad6e70-78bd-6488-ab1a-39c50d8a2a46
    2020-09-08T23:53:01.3307078Z INFO : Sophos Endpoint Defense is not installed
    2020-09-08T23:53:01.3307078Z INFO : Not tamper-protected by SED
    2020-09-08T23:53:01.3307078Z INFO : detectedMsiInstalledMcs.installed: 0
    2020-09-08T23:53:01.3307078Z INFO : Not migrating from SEC endpoint.
    2020-09-08T23:53:01.3307078Z INFO : Beginning command definition.
    2020-09-08T23:53:01.3307078Z INFO : Adding command to remove Sophos 'Image File Execution Options' keys.
    2020-09-08T23:53:01.3307078Z INFO : Adding command to wait for SAU update to complete.
    2020-09-08T23:53:01.3307078Z INFO : Adding competitor detection command.
    2020-09-08T23:53:01.3307078Z INFO : Adding command to register with Sophos cloud.
    2020-09-08T23:53:01.3307078Z INFO : Adding command to download product suite.
    2020-09-08T23:53:01.3307078Z INFO : Adding command to uninstall existing products.
    2020-09-08T23:53:01.3307078Z INFO : Adding command to remove existing installation of Sophos AutoUpdate
    2020-09-08T23:53:01.3307078Z INFO : Adding command to allow tamper protected reinstalls.
    2020-09-08T23:53:01.3307078Z INFO : Adding commands to uninstall remaining existing products.
    2020-09-08T23:53:01.3307078Z INFO : Adding command to remove existing installation of Sophos System Protection
    2020-09-08T23:53:01.3307078Z INFO : Adding command to remove existing installation of Sophos Heartbeat
    2020-09-08T23:53:01.3307078Z INFO : Adding command to remove existing installation of Sophos Network Access Control
    2020-09-08T23:53:01.3307078Z INFO : Adding command to remove existing installation of Sophos Client Firewall
    2020-09-08T23:53:01.3307078Z INFO : Adding command to remove existing installation of Sophos Patch
    2020-09-08T23:53:01.3307078Z INFO : Adding command to remove existing installation of Sophos Clean
    2020-09-08T23:53:01.3307078Z INFO : Adding command to retrieve policy.
    2020-09-08T23:53:01.3307078Z INFO : Adding command to prepare for installation.
    2020-09-08T23:53:01.3307078Z INFO : Adding command to install Sophos cloud.
    2020-09-08T23:53:01.3307078Z INFO : Command definition complete.
    2020-09-08T23:53:01.3307078Z INFO : Stage 1 version:1.9.100.0
    2020-09-08T23:53:01.3307078Z INFO : Stage 2 version:1.9.100.0
    2020-09-08T23:53:01.3307078Z INFO : OS version: 10.0.19041.
    2020-09-08T23:53:01.3307078Z INFO : Service pack: 0.0.
    2020-09-08T23:53:01.3307078Z INFO : System Language: 1033.
    2020-09-08T23:53:01.3463355Z INFO : User Language: 1033.
    2020-09-08T23:53:01.3463355Z INFO : 64 bit: yes.
    2020-09-08T23:53:01.3463355Z INFO : FindMainWindow: pid=3140
    2020-09-08T23:53:01.3463355Z INFO : Window is main control window of process
    2020-09-08T23:53:01.3463355Z INFO : ::EnumWindows stopped early; window found
    2020-09-08T23:53:01.3463355Z INFO : _bestHandle=0003008C
    2020-09-08T23:53:01.9713383Z INFO : Running System Property Check: VerifyTrust ...
    2020-09-08T23:53:02.0182067Z INFO : System Property Check: VerifyTrust - PASSED
    2020-09-08T23:53:02.0963340Z INFO : Running System Property Check: HostnameLength ...
    2020-09-08T23:53:02.0963340Z INFO : Initialized Winsock subsystem
    2020-09-08T23:53:02.1900886Z INFO : Valid hostname length
    2020-09-08T23:53:02.1900886Z INFO : System Property Check: HostnameLength - PASSED
    2020-09-08T23:53:02.2525897Z INFO : Running System Property Check: GroupNameLength ...
    2020-09-08T23:53:02.2525897Z INFO : System Property Check: GroupNameLength - PASSED
    2020-09-08T23:53:02.3150862Z INFO : Running System Property Check: IsAdministrator ...
    2020-09-08T23:53:02.3150862Z INFO : System Property Check: IsAdministrator - PASSED
    2020-09-08T23:53:02.3775921Z INFO : Running System Property Check: JunctionPointsCheck ...
    2020-09-08T23:53:02.3932134Z INFO : Scanned 57 Sophos paths for junction points
    2020-09-08T23:53:02.3932134Z INFO : System Property Check: JunctionPointsCheck - PASSED
    2020-09-08T23:53:02.4557146Z INFO : Running System Property Check: PendingReboots ...
    2020-09-08T23:53:02.4557146Z INFO : System Property Check: PendingReboots - PASSED
    2020-09-08T23:53:02.5182166Z INFO : Running System Property Check: PrimaryDriveSpace ...
    2020-09-08T23:53:02.5182166Z INFO : Enough space: 86107 Mb
    2020-09-08T23:53:02.5182166Z INFO : System Property Check: PrimaryDriveSpace - PASSED
    2020-09-08T23:53:02.5807097Z INFO : Running System Property Check: MsXml ...
    2020-09-08T23:53:02.5807097Z INFO : System Property Check: MsXml - PASSED
    2020-09-08T23:53:02.6432123Z INFO : Running System Property Check: NotFirewall ...
    2020-09-08T23:53:02.6432123Z INFO : System Property Check: NotFirewall - PASSED
    2020-09-08T23:53:02.7057087Z INFO : Running System Property Check: NotHitmanProAlertIncompatible ...
    2020-09-08T23:53:02.7057087Z INFO : No HitmanPro.Alert Installed
    2020-09-08T23:53:02.7057087Z INFO : System Property Check: NotHitmanProAlertIncompatible - PASSED
    2020-09-08T23:53:02.7682102Z INFO : Running System Property Check: NotInvincea ...
    2020-09-08T23:53:02.7682102Z INFO : System Property Check: NotInvincea - PASSED
    2020-09-08T23:53:02.8307171Z INFO : Running System Property Check: NotMessageRelay ...
    2020-09-08T23:53:02.8307171Z INFO : RMS is not installed on the endpoint
    2020-09-08T23:53:02.8307171Z INFO : System Property Check: NotMessageRelay - PASSED
    2020-09-08T23:53:02.8932199Z INFO : Running System Property Check: NotNac ...
    2020-09-08T23:53:02.8932199Z INFO : System Property Check: NotNac - PASSED
    2020-09-08T23:53:02.9557382Z INFO : Running System Property Check: NotPatch ...
    2020-09-08T23:53:02.9557382Z INFO : System Property Check: NotPatch - PASSED
    2020-09-08T23:53:03.0182163Z INFO : Running System Property Check: NotPureMessageDomino ...
    2020-09-08T23:53:03.0182163Z INFO : System Property Check: NotPureMessageDomino - PASSED
    2020-09-08T23:53:03.0807205Z INFO : Running System Property Check: NotPureMessageExchangeWithAntiSpam ...
    2020-09-08T23:53:03.0807205Z INFO : System Property Check: NotPureMessageExchangeWithAntiSpam - PASSED
    2020-09-08T23:53:03.1432104Z INFO : Running System Property Check: NotSharePoint ...
    2020-09-08T23:53:03.1432104Z INFO : System Property Check: NotSharePoint - PASSED
    2020-09-08T23:53:03.2057205Z INFO : Running System Property Check: NotSecServer ...
    2020-09-08T23:53:03.2057205Z INFO : System Property Check: NotSecServer - PASSED
    2020-09-08T23:53:03.2682144Z INFO : Running System Property Check: NotSum ...
    2020-09-08T23:53:03.2682144Z INFO : System Property Check: NotSum - PASSED
    2020-09-08T23:53:03.3307219Z INFO : Running System Property Check: NotBlockedByTamperProtection ...
    2020-09-08T23:53:03.3307219Z INFO : Not tamper protected
    2020-09-08T23:53:03.3307219Z INFO : System Property Check: NotBlockedByTamperProtection - PASSED
    2020-09-08T23:53:03.3932113Z INFO : Running System Property Check: RAMSize ...
    2020-09-08T23:53:03.3932113Z INFO : System Property Check: RAMSize - PASSED
    2020-09-08T23:53:03.4557176Z INFO : Running System Property Check: SupportedArchitecture ...
    2020-09-08T23:53:03.4557176Z INFO : Running on x64
    2020-09-08T23:53:03.4557176Z INFO : System Property Check: SupportedArchitecture - PASSED
    2020-09-08T23:53:03.5182117Z INFO : Running System Property Check: SupportedOS ...
    2020-09-08T23:53:03.5182117Z INFO : Running on workstation.
    2020-09-08T23:53:03.5182117Z INFO : System Property Check: SupportedOS - PASSED
    2020-09-08T23:53:03.5807177Z INFO : Running System Property Check: SupportedPatches ...
    2020-09-08T23:53:03.5807177Z INFO : System Property Check: SupportedPatches - PASSED
    2020-09-08T23:53:03.6432140Z INFO : Running System Property Check: ValidTempDirectory ...
    2020-09-08T23:53:03.6432140Z INFO : Temp folder exists.
    2020-09-08T23:53:03.6432140Z INFO : System Property Check: ValidTempDirectory - PASSED
    2020-09-08T23:53:03.7057204Z INFO : Running System Property Check: ValidLocalInstallSourceDirectory ...
    2020-09-08T23:53:03.7057204Z INFO : No local install source folder to validate.
    2020-09-08T23:53:03.7057204Z INFO : System Property Check: ValidLocalInstallSourceDirectory - PASSED
    2020-09-08T23:53:03.7682098Z INFO : Running System Property Check: ValidServer ...
    2020-09-08T23:53:03.7682098Z INFO : System Property Check: ValidServer - PASSED
    2020-09-08T23:53:03.8307107Z INFO : Running System Property Check: ValidDeploymentInfo ...
    2020-09-08T23:53:03.8307107Z INFO : Current Time: 2020-09-08T23:53:03.830000
    2020-09-08T23:53:03.8307107Z INFO : This computer is part of the domain MYDOMAIN
    2020-09-08T23:53:03.8307107Z INFO : Domain Name: mydomain
    2020-09-08T23:53:03.8307107Z INFO : Computer Name: 4a89bb56
    2020-09-08T23:53:03.8307107Z INFO : Computer Description is not available.
    2020-09-08T23:53:03.8307107Z INFO : Operating System: WIN10
    2020-09-08T23:53:03.8307107Z INFO : ProductType: 4
    2020-09-08T23:53:03.9869614Z INFO : Last logged on user was: \\
    2020-09-08T23:53:03.9869614Z INFO : Fully Qualified Domain Name: 4a89bb56.mydomain.local
    2020-09-08T23:53:03.9869614Z INFO : Processor architecture: x64
    2020-09-08T23:53:03.9869614Z INFO : OS Major Version: 10 and OS Minor Version: 0
    2020-09-08T23:53:03.9869614Z INFO : Friendly OS Name: WIN10
    2020-09-08T23:53:03.9869614Z INFO : Is server?: 0
    2020-09-08T23:53:04.0182101Z INFO : Sending HTTP 'POST' request to: sophos/management/ep/install/deployment-info/3
    2020-09-08T23:53:04.0182101Z WARNING : WinHttpGetProxyForUrl returned: 12180
    2020-09-08T23:53:04.0182101Z INFO : Attempting to connect using proxy '' of type 'Empty Proxy'.
    2020-09-08T23:53:04.0182101Z INFO : Set security protocol: 00000800
    2020-09-08T23:53:04.0182101Z INFO : Opening connection to dzr-mcs-amzn-us-west-2-fa88.upe.p.hmr.sophos.com
    2020-09-08T23:53:04.0182101Z INFO : Sending request for connection confirmation through potential proxy
    2020-09-08T23:53:04.0182101Z INFO : Request content size: 0
    2020-09-08T23:53:04.7994601Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
    2020-09-08T23:53:04.8150836Z INFO : Certificate check succeeded
    2020-09-08T23:53:04.8150836Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
    2020-09-08T23:53:05.0025859Z INFO : Response status code: 200
    2020-09-08T23:53:05.0025859Z INFO : Response data size: 168
    2020-09-08T23:53:05.0025859Z INFO : trySendRequestThroughPotentialProxy returning response with status code: 200
    2020-09-08T23:53:05.0025859Z INFO : Request content size: 1352
    2020-09-08T23:53:05.0025859Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
    2020-09-08T23:53:05.0025859Z INFO : Certificate check succeeded
    2020-09-08T23:53:05.0025859Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
    2020-09-08T23:53:05.2057132Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
    2020-09-08T23:53:05.2057132Z INFO : Certificate check succeeded
    2020-09-08T23:53:05.2057132Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
    2020-09-08T23:53:05.2057132Z INFO : Response status code: 200
    2020-09-08T23:53:05.2057132Z INFO : Response data size: 279
    2020-09-08T23:53:05.2057132Z INFO : Parsing message received for deployment token: {"dciFileName":"db95fbd4daf3e97e8ef9ef916ce966f4","registrationToken":"0ab27e7c30fcabc91952ed0d8e0da3973663457884ca3db2d3c420678a4feedf","products":[{"product":"DEVICE_ENCRYPTION","supported":true,"reasons":[]},{"product":"INTERCEPT_ADVANCED_EDR","supported":true,"reasons":[]}]}
    2020-09-08T23:53:05.2057132Z INFO : Model::token value changed to: 0ab27e7c30fcabc91952ed0d8e0da3973663457884ca3db2d3c420678a4feedf
    2020-09-08T23:53:05.2057132Z INFO : Licenses available: DEVICE_ENCRYPTION INTERCEPT_ADVANCED_EDR
    2020-09-08T23:53:05.2682104Z INFO : Running System Property Check: InstallationInProgress ...
    2020-09-08T23:53:05.2682104Z INFO : System Property Check: InstallationInProgress - PASSED
    2020-09-08T23:53:05.3307098Z INFO : Running System Property Check: SafeGuardEncryption ...
    2020-09-08T23:53:05.3307098Z INFO : Entered installedProductCode, upgradeCode={BA2F47D3-1C17-40E7-8DE7-1CD733442B6C}
    2020-09-08T23:53:05.3307098Z INFO : Product is not installed
    2020-09-08T23:53:05.3307098Z INFO : licensesContainFeature(DEVICE_ENCRYPTION): true
    2020-09-08T23:53:05.3307098Z INFO : System Property Check: SafeGuardEncryption - PASSED

Reply
  • in reply to Yashraj S

    Thank you ,

     

    We now have successfully installed one client but that was only by running the SophosSetup.exe manually.

    Deployment via SCCM did not succeed, that had only create the sophos folder with the cloudinstaller log file.

     Here is how I have deployed Sophos via SCCM (see link: https://support.sophos.com/support/s/article/KB-000035049?language=en_US)

    1. Copy the file SophosSetup.exe to a shared location which is accessible by the computers you wish to install to.
    2. Launch SCCM and navigate to Software Library, select Application Management, and choose Packages.
    3. Right-click on Packages and select Create Package.
    4. On the Package page of the Create Package and Program Wizard, specify the following information as required:

    Name: Sophos Central Managed Endpoint

    1. Check This package contains source files. Click Browse to open the Set Source Folder dialog box where you can specify the location of the installer file SophosSetup.exe which was setup in Step 3.
    2. Click next for Standard program type and enter the following information:

    Name: SophosSetup.exe
    Command Line: SophosSetup.exe
    Note: An example command line might be: SophosSetup.exe
    Program can run: Only when a user is logged on
    Run mode: Run with administrative rights
    Drive mode: Runs with UNC name
    Run and Start-up fields are optional

    1. On the Requirements section, create a requirement rule that the package runs only on supported Windows platforms.
    2. Complete the wizard to finish creating the package.
    3. The package is now ready to be deployed to your computers.
    4. Distribute to all DPs, wait for it and run a test deployment on Pilot (use deployment required).
    5. Add a task in the task sequence

    This also require TLS 1.2 enabled on client. A quick workaround is to deploy the registry key via an application. (I have checked that part and this gets deployed too)

    Let me know if you can think about anything I have missed.


    Full log below:

    2020-09-08T23:52:57.9557072Z INFO : Stage 1 command-line options:
    2020-09-08T23:52:57.9557072Z INFO : ---
    2020-09-08T23:52:57.9557072Z INFO : Quiet mode on: 0
    2020-09-08T23:52:57.9557072Z INFO : Automatic Proxy detection disabled: 0
    2020-09-08T23:52:57.9557072Z INFO : No feedback mode on: 0
    2020-09-08T23:52:57.9557072Z INFO : Dump feedback enabled: 0
    2020-09-08T23:52:57.9557072Z INFO : Bypass competitor removal: 0
    2020-09-08T23:52:57.9557072Z INFO : Using CRT catalog file path: --
    2020-09-08T23:52:57.9557072Z INFO : Only register endpoint with Central: 0
    2020-09-08T23:52:57.9557072Z INFO : Log messages between endpoint and Central: 0
    2020-09-08T23:52:57.9557072Z INFO : Log command-line passed to executables: 0
    2020-09-08T23:52:57.9557072Z INFO : Using custom server that hosts the installer stage2 filename : --
    2020-09-08T23:52:57.9557072Z INFO : Using cloud group: --
    2020-09-08T23:52:57.9557072Z INFO : Overriding computer name: --
    2020-09-08T23:52:57.9557072Z INFO : Overriding computer description: --
    2020-09-08T23:52:57.9557072Z INFO : Overriding domain name: --
    2020-09-08T23:52:57.9557072Z INFO : Language will be set to: --
    2020-09-08T23:52:57.9557072Z INFO : Using message relays: --
    2020-09-08T23:52:57.9557072Z INFO : Proxy address: --
    2020-09-08T23:52:57.9557072Z INFO : Proxy user name: --
    2020-09-08T23:52:57.9557072Z INFO : Using custom customer token: --
    2020-09-08T23:52:57.9557072Z INFO : Using specified products: --
    2020-09-08T23:52:57.9713299Z INFO : Using certificates from the MCS app data folder.: 0
    2020-09-08T23:52:57.9713299Z INFO : Using custom customer ID.: --
    2020-09-08T23:52:57.9713299Z INFO : Using specified user ID.: --
    2020-09-08T23:52:57.9713299Z INFO : Using local install source.: --
    2020-09-08T23:52:57.9713299Z INFO : Using experimental SRV.: --
    2020-09-08T23:52:57.9713299Z INFO : Invoked as part of SEC migration.: 0
    2020-09-08T23:52:57.9713299Z INFO : ---
    2020-09-08T23:52:57.9713299Z INFO : Sending HTTP 'POST' request to: api/download/stage2-details/f6c2b8c6-9163-4465-a57b-83a8a2b93155
    2020-09-08T23:52:58.0494590Z WARNING : WinHttpGetProxyForUrl returned: 12180
    2020-09-08T23:52:58.0494590Z INFO : Attempting to connect using proxy '' of type 'Empty Proxy'.
    2020-09-08T23:52:58.0807098Z INFO : Set security protocol: 00000800
    2020-09-08T23:52:58.0807098Z INFO : Opening connection to dzr-api-amzn-us-west-2-fa88.api-upe.p.hmr.sophos.com
    2020-09-08T23:52:58.0807098Z INFO : Request content size: 30
    2020-09-08T23:52:59.6588361Z INFO : Sending request
    2020-09-08T23:52:59.6588361Z INFO : Request sent
    2020-09-08T23:52:59.8463344Z INFO : Sending request
    2020-09-08T23:52:59.8619563Z INFO : Request sent
    2020-09-08T23:52:59.8619563Z INFO : Response status code: 200
    2020-09-08T23:52:59.8619563Z INFO : Response data size: 174
    2020-09-08T23:52:59.8619563Z INFO : trySendRequestThroughPotentialProxy returning response with status code: 200
    2020-09-08T23:52:59.9088362Z INFO : Parsing message received for Stage 2 filename: '{"mcs_server":"dzr-mcs-amzn-us-west-2-fa88.upe.p.hmr.sophos.com","stage2_filename":"stage2-1.9.100.0-47a8945486d1c4f46a3cdc3ce4780b93c70b710fc3543553b07c5ddd1f3f8fc3.tar.gz"}'
    2020-09-08T23:52:59.9088362Z INFO : Sending HTTP 'GET' request to: full/central/windows/business/installer/stage2-1.9.100.0-47a8945486d1c4f46a3cdc3ce4780b93c70b710fc3543553b07c5ddd1f3f8fc3.tar.gz
    2020-09-08T23:52:59.9244574Z WARNING : WinHttpGetProxyForUrl returned: 12180
    2020-09-08T23:52:59.9244574Z INFO : Attempting to connect using proxy '' of type 'Empty Proxy'.
    2020-09-08T23:52:59.9244574Z INFO : Set security protocol: 00000800
    2020-09-08T23:52:59.9244574Z INFO : Opening connection to downloads.sophos.com
    2020-09-08T23:52:59.9244574Z INFO : Request content size: 0
    2020-09-08T23:53:00.3150846Z INFO : Sending request
    2020-09-08T23:53:00.3150846Z INFO : Request sent
    2020-09-08T23:53:00.5963332Z INFO : Response status code: 200
    2020-09-08T23:53:00.5963332Z INFO : Response data size: 1792172
    2020-09-08T23:53:00.5963332Z INFO : trySendRequestThroughPotentialProxy returning response with status code: 200
    2020-09-08T23:53:00.5963332Z INFO : Extracting files:
    2020-09-08T23:53:00.5963332Z INFO : integrity.dat
    2020-09-08T23:53:00.5963332Z INFO : manifest.dat
    2020-09-08T23:53:00.5963332Z INFO : scf.dat
    2020-09-08T23:53:00.6119596Z INFO : sof.dat
    2020-09-08T23:53:00.6119596Z INFO : SophosSetup_Stage2.exe
    2020-09-08T23:53:00.6588299Z INFO : SUL.dll
    2020-09-08T23:53:00.6900807Z INFO : Management Certs/sophosca1.crl
    2020-09-08T23:53:00.6900807Z INFO : Management Certs/sophosca1.crt
    2020-09-08T23:53:00.6900807Z INFO : Management Certs/sophosca2.crl
    2020-09-08T23:53:00.6900807Z INFO : Management Certs/sophosca2.crt
    2020-09-08T23:53:00.6900807Z INFO : Management Certs/sophosca3.crl
    2020-09-08T23:53:00.6900807Z INFO : Management Certs/sophosca3.crt
    2020-09-08T23:53:00.7057070Z INFO : Management Certs/sophosca4.crl
    2020-09-08T23:53:00.7057070Z INFO : Management Certs/sophosca4.crt
    2020-09-08T23:53:00.7057070Z INFO : ManifestCerts/rootca.crl
    2020-09-08T23:53:00.7057070Z INFO : ManifestCerts/rootca.crt
    2020-09-08T23:53:00.7057070Z INFO : ManifestCerts/rootca384.crl
    2020-09-08T23:53:00.7057070Z INFO : ManifestCerts/rootca384.crt
    2020-09-08T23:53:00.7057070Z INFO : Checking manifest:C:\\Program Files (x86)\\Sophos\\CloudInstaller\\extract_cache\\manifest.dat
    2020-09-08T23:53:00.8463310Z INFO : Running setup.
    Started C:\Program Files (x86)\Sophos\CloudInstaller\SophosSetup_Stage2.exe
    2020-09-08T23:53:01.0025823Z INFO : Stage 2 command-line options:
    2020-09-08T23:53:01.0025823Z INFO : ---
    2020-09-08T23:53:01.0025823Z INFO : Parent PID: 3140
    2020-09-08T23:53:01.0025823Z INFO : Server: dzr-mcs-amzn-us-west-2-fa88.upe.p.hmr.sophos.com
    2020-09-08T23:53:01.0025823Z INFO : Message relays: --
    2020-09-08T23:53:01.0025823Z INFO : Suppressing feedback: 0
    2020-09-08T23:53:01.0025823Z INFO : Dump feedback to disk: 0
    2020-09-08T23:53:01.0025823Z INFO : Register only: 0
    2020-09-08T23:53:01.0025823Z INFO : Trail logging: 0
    2020-09-08T23:53:01.0025823Z INFO : Command-line logging: 0
    2020-09-08T23:53:01.0025823Z INFO : Bypassing competitor removal: 0
    2020-09-08T23:53:01.0025823Z INFO : CRT catalog: --
    2020-09-08T23:53:01.0025823Z INFO : Language: --
    2020-09-08T23:53:01.0025823Z INFO : Log files: C:\\ProgramData\\Sophos\\CloudInstaller\\Logs\\SophosCloudInstaller_20200908_235257.log
    2020-09-08T23:53:01.0025823Z INFO : Group: --
    2020-09-08T23:53:01.0025823Z INFO : Quiet: 0
    2020-09-08T23:53:01.0025823Z INFO : Virtual appliance: 0
    2020-09-08T23:53:01.0025823Z INFO : Proxy address: --
    2020-09-08T23:53:01.0025823Z INFO : Proxy user: --
    2020-09-08T23:53:01.0025823Z INFO : Overriding computer name: --
    2020-09-08T23:53:01.0025823Z INFO : Overriding computer description: --
    2020-09-08T23:53:01.0025823Z INFO : Overriding domain: --
    2020-09-08T23:53:01.0025823Z INFO : Disable proxy detection: 0
    2020-09-08T23:53:01.0025823Z INFO : Customer Token Specified: f6c2b8c6-9163-4465-a57b-83a8a2b93155
    2020-09-08T23:53:01.0025823Z INFO : Products: all
    2020-09-08T23:53:01.0025823Z INFO : Pipe write handle: 1868
    2020-09-08T23:53:01.0025823Z INFO : MCS Certificates Folder: 0
    2020-09-08T23:53:01.0025823Z INFO : MCS Customer Id: 9cad6e70-78bd-6488-ab1a-39c50d8a2a46
    2020-09-08T23:53:01.0025823Z INFO : User Id: --
    2020-09-08T23:53:01.0025823Z INFO : Local install source: --
    2020-09-08T23:53:01.0025823Z INFO : Name of SRV domain: --
    2020-09-08T23:53:01.0025823Z INFO : Partner Id: --
    2020-09-08T23:53:01.0025823Z INFO : Customer Estate Id: --
    2020-09-08T23:53:01.0025823Z INFO : Invoked as part of SEC migration: 0
    2020-09-08T23:53:01.0025823Z INFO : ---
    2020-09-08T23:53:01.0182157Z INFO : User name: SYSTEM
    2020-09-08T23:53:01.0182157Z INFO : NameDnsDomain: MYDOMAIN\\-4A89BB56$
    2020-09-08T23:53:01.0182157Z INFO : dnsDomain: mydomain.local
    2020-09-08T23:53:01.3150858Z INFO : NetUserGetInfo: The user name could not be found. Assuming non-Domain user.
    2020-09-08T23:53:01.3150858Z INFO : User profile loaded
    2020-09-08T23:53:01.3150858Z INFO : Model::server value changed to: dzr-mcs-amzn-us-west-2-fa88.upe.p.hmr.sophos.com
    2020-09-08T23:53:01.3150858Z INFO : Model::messageRelays value changed to be size: 0
    2020-09-08T23:53:01.3150858Z INFO : Model::group value changed to:
    2020-09-08T23:53:01.3150858Z INFO : Model::parentPid value changed to: 3140
    2020-09-08T23:53:01.3307078Z INFO : Model::products changed to: all
    2020-09-08T23:53:01.3307078Z INFO : Model::customer token value changed to: f6c2b8c6-9163-4465-a57b-83a8a2b93155
    2020-09-08T23:53:01.3307078Z INFO : MCS Crts: C:\\Program Files (x86)\\Sophos\\CloudInstaller\\Management Certs\\sophosca1.crt,C:\\Program Files (x86)\\Sophos\\CloudInstaller\\Management Certs\\sophosca2.crt,C:\\Program Files (x86)\\Sophos\\CloudInstaller\\Management Certs\\sophosca3.crt,C:\\Program Files (x86)\\Sophos\\CloudInstaller\\Management Certs\\sophosca4.crt
    2020-09-08T23:53:01.3307078Z INFO : MCS CRLs: C:\\Program Files (x86)\\Sophos\\CloudInstaller\\Management Certs\\sophosca1.crl,C:\\Program Files (x86)\\Sophos\\CloudInstaller\\Management Certs\\sophosca2.crl,C:\\Program Files (x86)\\Sophos\\CloudInstaller\\Management Certs\\sophosca3.crl,C:\\Program Files (x86)\\Sophos\\CloudInstaller\\Management Certs\\sophosca4.crl
    2020-09-08T23:53:01.3307078Z INFO : Model:: MCS customer id value changed to: 9cad6e70-78bd-6488-ab1a-39c50d8a2a46
    2020-09-08T23:53:01.3307078Z INFO : Sophos Endpoint Defense is not installed
    2020-09-08T23:53:01.3307078Z INFO : Not tamper-protected by SED
    2020-09-08T23:53:01.3307078Z INFO : detectedMsiInstalledMcs.installed: 0
    2020-09-08T23:53:01.3307078Z INFO : Not migrating from SEC endpoint.
    2020-09-08T23:53:01.3307078Z INFO : Beginning command definition.
    2020-09-08T23:53:01.3307078Z INFO : Adding command to remove Sophos 'Image File Execution Options' keys.
    2020-09-08T23:53:01.3307078Z INFO : Adding command to wait for SAU update to complete.
    2020-09-08T23:53:01.3307078Z INFO : Adding competitor detection command.
    2020-09-08T23:53:01.3307078Z INFO : Adding command to register with Sophos cloud.
    2020-09-08T23:53:01.3307078Z INFO : Adding command to download product suite.
    2020-09-08T23:53:01.3307078Z INFO : Adding command to uninstall existing products.
    2020-09-08T23:53:01.3307078Z INFO : Adding command to remove existing installation of Sophos AutoUpdate
    2020-09-08T23:53:01.3307078Z INFO : Adding command to allow tamper protected reinstalls.
    2020-09-08T23:53:01.3307078Z INFO : Adding commands to uninstall remaining existing products.
    2020-09-08T23:53:01.3307078Z INFO : Adding command to remove existing installation of Sophos System Protection
    2020-09-08T23:53:01.3307078Z INFO : Adding command to remove existing installation of Sophos Heartbeat
    2020-09-08T23:53:01.3307078Z INFO : Adding command to remove existing installation of Sophos Network Access Control
    2020-09-08T23:53:01.3307078Z INFO : Adding command to remove existing installation of Sophos Client Firewall
    2020-09-08T23:53:01.3307078Z INFO : Adding command to remove existing installation of Sophos Patch
    2020-09-08T23:53:01.3307078Z INFO : Adding command to remove existing installation of Sophos Clean
    2020-09-08T23:53:01.3307078Z INFO : Adding command to retrieve policy.
    2020-09-08T23:53:01.3307078Z INFO : Adding command to prepare for installation.
    2020-09-08T23:53:01.3307078Z INFO : Adding command to install Sophos cloud.
    2020-09-08T23:53:01.3307078Z INFO : Command definition complete.
    2020-09-08T23:53:01.3307078Z INFO : Stage 1 version:1.9.100.0
    2020-09-08T23:53:01.3307078Z INFO : Stage 2 version:1.9.100.0
    2020-09-08T23:53:01.3307078Z INFO : OS version: 10.0.19041.
    2020-09-08T23:53:01.3307078Z INFO : Service pack: 0.0.
    2020-09-08T23:53:01.3307078Z INFO : System Language: 1033.
    2020-09-08T23:53:01.3463355Z INFO : User Language: 1033.
    2020-09-08T23:53:01.3463355Z INFO : 64 bit: yes.
    2020-09-08T23:53:01.3463355Z INFO : FindMainWindow: pid=3140
    2020-09-08T23:53:01.3463355Z INFO : Window is main control window of process
    2020-09-08T23:53:01.3463355Z INFO : ::EnumWindows stopped early; window found
    2020-09-08T23:53:01.3463355Z INFO : _bestHandle=0003008C
    2020-09-08T23:53:01.9713383Z INFO : Running System Property Check: VerifyTrust ...
    2020-09-08T23:53:02.0182067Z INFO : System Property Check: VerifyTrust - PASSED
    2020-09-08T23:53:02.0963340Z INFO : Running System Property Check: HostnameLength ...
    2020-09-08T23:53:02.0963340Z INFO : Initialized Winsock subsystem
    2020-09-08T23:53:02.1900886Z INFO : Valid hostname length
    2020-09-08T23:53:02.1900886Z INFO : System Property Check: HostnameLength - PASSED
    2020-09-08T23:53:02.2525897Z INFO : Running System Property Check: GroupNameLength ...
    2020-09-08T23:53:02.2525897Z INFO : System Property Check: GroupNameLength - PASSED
    2020-09-08T23:53:02.3150862Z INFO : Running System Property Check: IsAdministrator ...
    2020-09-08T23:53:02.3150862Z INFO : System Property Check: IsAdministrator - PASSED
    2020-09-08T23:53:02.3775921Z INFO : Running System Property Check: JunctionPointsCheck ...
    2020-09-08T23:53:02.3932134Z INFO : Scanned 57 Sophos paths for junction points
    2020-09-08T23:53:02.3932134Z INFO : System Property Check: JunctionPointsCheck - PASSED
    2020-09-08T23:53:02.4557146Z INFO : Running System Property Check: PendingReboots ...
    2020-09-08T23:53:02.4557146Z INFO : System Property Check: PendingReboots - PASSED
    2020-09-08T23:53:02.5182166Z INFO : Running System Property Check: PrimaryDriveSpace ...
    2020-09-08T23:53:02.5182166Z INFO : Enough space: 86107 Mb
    2020-09-08T23:53:02.5182166Z INFO : System Property Check: PrimaryDriveSpace - PASSED
    2020-09-08T23:53:02.5807097Z INFO : Running System Property Check: MsXml ...
    2020-09-08T23:53:02.5807097Z INFO : System Property Check: MsXml - PASSED
    2020-09-08T23:53:02.6432123Z INFO : Running System Property Check: NotFirewall ...
    2020-09-08T23:53:02.6432123Z INFO : System Property Check: NotFirewall - PASSED
    2020-09-08T23:53:02.7057087Z INFO : Running System Property Check: NotHitmanProAlertIncompatible ...
    2020-09-08T23:53:02.7057087Z INFO : No HitmanPro.Alert Installed
    2020-09-08T23:53:02.7057087Z INFO : System Property Check: NotHitmanProAlertIncompatible - PASSED
    2020-09-08T23:53:02.7682102Z INFO : Running System Property Check: NotInvincea ...
    2020-09-08T23:53:02.7682102Z INFO : System Property Check: NotInvincea - PASSED
    2020-09-08T23:53:02.8307171Z INFO : Running System Property Check: NotMessageRelay ...
    2020-09-08T23:53:02.8307171Z INFO : RMS is not installed on the endpoint
    2020-09-08T23:53:02.8307171Z INFO : System Property Check: NotMessageRelay - PASSED
    2020-09-08T23:53:02.8932199Z INFO : Running System Property Check: NotNac ...
    2020-09-08T23:53:02.8932199Z INFO : System Property Check: NotNac - PASSED
    2020-09-08T23:53:02.9557382Z INFO : Running System Property Check: NotPatch ...
    2020-09-08T23:53:02.9557382Z INFO : System Property Check: NotPatch - PASSED
    2020-09-08T23:53:03.0182163Z INFO : Running System Property Check: NotPureMessageDomino ...
    2020-09-08T23:53:03.0182163Z INFO : System Property Check: NotPureMessageDomino - PASSED
    2020-09-08T23:53:03.0807205Z INFO : Running System Property Check: NotPureMessageExchangeWithAntiSpam ...
    2020-09-08T23:53:03.0807205Z INFO : System Property Check: NotPureMessageExchangeWithAntiSpam - PASSED
    2020-09-08T23:53:03.1432104Z INFO : Running System Property Check: NotSharePoint ...
    2020-09-08T23:53:03.1432104Z INFO : System Property Check: NotSharePoint - PASSED
    2020-09-08T23:53:03.2057205Z INFO : Running System Property Check: NotSecServer ...
    2020-09-08T23:53:03.2057205Z INFO : System Property Check: NotSecServer - PASSED
    2020-09-08T23:53:03.2682144Z INFO : Running System Property Check: NotSum ...
    2020-09-08T23:53:03.2682144Z INFO : System Property Check: NotSum - PASSED
    2020-09-08T23:53:03.3307219Z INFO : Running System Property Check: NotBlockedByTamperProtection ...
    2020-09-08T23:53:03.3307219Z INFO : Not tamper protected
    2020-09-08T23:53:03.3307219Z INFO : System Property Check: NotBlockedByTamperProtection - PASSED
    2020-09-08T23:53:03.3932113Z INFO : Running System Property Check: RAMSize ...
    2020-09-08T23:53:03.3932113Z INFO : System Property Check: RAMSize - PASSED
    2020-09-08T23:53:03.4557176Z INFO : Running System Property Check: SupportedArchitecture ...
    2020-09-08T23:53:03.4557176Z INFO : Running on x64
    2020-09-08T23:53:03.4557176Z INFO : System Property Check: SupportedArchitecture - PASSED
    2020-09-08T23:53:03.5182117Z INFO : Running System Property Check: SupportedOS ...
    2020-09-08T23:53:03.5182117Z INFO : Running on workstation.
    2020-09-08T23:53:03.5182117Z INFO : System Property Check: SupportedOS - PASSED
    2020-09-08T23:53:03.5807177Z INFO : Running System Property Check: SupportedPatches ...
    2020-09-08T23:53:03.5807177Z INFO : System Property Check: SupportedPatches - PASSED
    2020-09-08T23:53:03.6432140Z INFO : Running System Property Check: ValidTempDirectory ...
    2020-09-08T23:53:03.6432140Z INFO : Temp folder exists.
    2020-09-08T23:53:03.6432140Z INFO : System Property Check: ValidTempDirectory - PASSED
    2020-09-08T23:53:03.7057204Z INFO : Running System Property Check: ValidLocalInstallSourceDirectory ...
    2020-09-08T23:53:03.7057204Z INFO : No local install source folder to validate.
    2020-09-08T23:53:03.7057204Z INFO : System Property Check: ValidLocalInstallSourceDirectory - PASSED
    2020-09-08T23:53:03.7682098Z INFO : Running System Property Check: ValidServer ...
    2020-09-08T23:53:03.7682098Z INFO : System Property Check: ValidServer - PASSED
    2020-09-08T23:53:03.8307107Z INFO : Running System Property Check: ValidDeploymentInfo ...
    2020-09-08T23:53:03.8307107Z INFO : Current Time: 2020-09-08T23:53:03.830000
    2020-09-08T23:53:03.8307107Z INFO : This computer is part of the domain MYDOMAIN
    2020-09-08T23:53:03.8307107Z INFO : Domain Name: mydomain
    2020-09-08T23:53:03.8307107Z INFO : Computer Name: 4a89bb56
    2020-09-08T23:53:03.8307107Z INFO : Computer Description is not available.
    2020-09-08T23:53:03.8307107Z INFO : Operating System: WIN10
    2020-09-08T23:53:03.8307107Z INFO : ProductType: 4
    2020-09-08T23:53:03.9869614Z INFO : Last logged on user was: \\
    2020-09-08T23:53:03.9869614Z INFO : Fully Qualified Domain Name: 4a89bb56.mydomain.local
    2020-09-08T23:53:03.9869614Z INFO : Processor architecture: x64
    2020-09-08T23:53:03.9869614Z INFO : OS Major Version: 10 and OS Minor Version: 0
    2020-09-08T23:53:03.9869614Z INFO : Friendly OS Name: WIN10
    2020-09-08T23:53:03.9869614Z INFO : Is server?: 0
    2020-09-08T23:53:04.0182101Z INFO : Sending HTTP 'POST' request to: sophos/management/ep/install/deployment-info/3
    2020-09-08T23:53:04.0182101Z WARNING : WinHttpGetProxyForUrl returned: 12180
    2020-09-08T23:53:04.0182101Z INFO : Attempting to connect using proxy '' of type 'Empty Proxy'.
    2020-09-08T23:53:04.0182101Z INFO : Set security protocol: 00000800
    2020-09-08T23:53:04.0182101Z INFO : Opening connection to dzr-mcs-amzn-us-west-2-fa88.upe.p.hmr.sophos.com
    2020-09-08T23:53:04.0182101Z INFO : Sending request for connection confirmation through potential proxy
    2020-09-08T23:53:04.0182101Z INFO : Request content size: 0
    2020-09-08T23:53:04.7994601Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
    2020-09-08T23:53:04.8150836Z INFO : Certificate check succeeded
    2020-09-08T23:53:04.8150836Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
    2020-09-08T23:53:05.0025859Z INFO : Response status code: 200
    2020-09-08T23:53:05.0025859Z INFO : Response data size: 168
    2020-09-08T23:53:05.0025859Z INFO : trySendRequestThroughPotentialProxy returning response with status code: 200
    2020-09-08T23:53:05.0025859Z INFO : Request content size: 1352
    2020-09-08T23:53:05.0025859Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
    2020-09-08T23:53:05.0025859Z INFO : Certificate check succeeded
    2020-09-08T23:53:05.0025859Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
    2020-09-08T23:53:05.2057132Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
    2020-09-08T23:53:05.2057132Z INFO : Certificate check succeeded
    2020-09-08T23:53:05.2057132Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
    2020-09-08T23:53:05.2057132Z INFO : Response status code: 200
    2020-09-08T23:53:05.2057132Z INFO : Response data size: 279
    2020-09-08T23:53:05.2057132Z INFO : Parsing message received for deployment token: {"dciFileName":"db95fbd4daf3e97e8ef9ef916ce966f4","registrationToken":"0ab27e7c30fcabc91952ed0d8e0da3973663457884ca3db2d3c420678a4feedf","products":[{"product":"DEVICE_ENCRYPTION","supported":true,"reasons":[]},{"product":"INTERCEPT_ADVANCED_EDR","supported":true,"reasons":[]}]}
    2020-09-08T23:53:05.2057132Z INFO : Model::token value changed to: 0ab27e7c30fcabc91952ed0d8e0da3973663457884ca3db2d3c420678a4feedf
    2020-09-08T23:53:05.2057132Z INFO : Licenses available: DEVICE_ENCRYPTION INTERCEPT_ADVANCED_EDR
    2020-09-08T23:53:05.2682104Z INFO : Running System Property Check: InstallationInProgress ...
    2020-09-08T23:53:05.2682104Z INFO : System Property Check: InstallationInProgress - PASSED
    2020-09-08T23:53:05.3307098Z INFO : Running System Property Check: SafeGuardEncryption ...
    2020-09-08T23:53:05.3307098Z INFO : Entered installedProductCode, upgradeCode={BA2F47D3-1C17-40E7-8DE7-1CD733442B6C}
    2020-09-08T23:53:05.3307098Z INFO : Product is not installed
    2020-09-08T23:53:05.3307098Z INFO : licensesContainFeature(DEVICE_ENCRYPTION): true
    2020-09-08T23:53:05.3307098Z INFO : System Property Check: SafeGuardEncryption - PASSED

Children
Unfiltered HTML