Extraction failure trying to install Intercept X

Question

We tried to install Intercept X on some client workstations and the error below is displayed: "Installation failed. Failed to extract the installation package." The user has an administrator profile. 
 In the logs it presents the following lines: 2020-11-19T20: 15: 53.0343311Z INFO: Extracting files: 2020-11-19T20: 15: 53.0353232Z ERROR: Extraction failure. 2020-11-19T20: 15: 53.0363205Z INFO: Cleaning up extracted files 
 Does anyone know how to solve this problem? What is the cause?

jeanleles · Accepted Answer

We were able to solve this problem by adding exceptions on the firewall for the domains listed in the KB below. https://support.sophos.com/support/s/article/KB-000035367?language=en_US 
 This way it worked! 
 Thanks for the help, Intrusus.

intrusus · Answer

Hi, 
 so the logs you have provided no longer seem to refer to the extraction failure, is that correct? Because now you get a different error when trying to install product. In your provided logfiles I can see that there was a certificate problem during connection establishment. 
 I refer here to logfile SophosCloudInstaller_20201120_185209: 
 2020-11-20T18:52:17.0982122Z ERROR : Failed to validate server cert; terminating HTTP connection. 2020-11-20T18:52:17.0982122Z ERROR : WinHttpSendRequest failed with certificate check failure and error 12017 2020-11-20T18:52:17.0982122Z INFO : Failed to connect using proxy '' with error: WinHttpSendRequest failed: certificate check failure 2020-11-20T18:52:17.0982122Z ERROR : HTTP error: Failed to connect with any proxy: certificate check failure 2020-11-20T18:52:17.0982122Z ERROR : System Property Check: ValidDeploymentInfo - FAILED 
 
 This error messages can be caused by a TLS\SSL inspection, which seems to be still active. If you haven't installed the cert from the root CA on your device it could cause the "Couldn't connect to Sophos Central" error. Install it or define an exclusion for the device. If you are running a Sophos XG, please try to add an exception rule on the TLS\SSL inspection page. Sophos is in general recommending excluding Sophos related traffic from HTTPS decryption. 
 If you have checked that the device got the Root Certificate installed or is excluded in TLS\SSL Inspection, you can also check the validity of the certificate of the SophosSetup.exe. Maybe you're using an old installer, I don't know. You can find the valid date in the SophosSetup.exe properties > Digital Signatures > Details > View Certificate. 
 
 If there are any error messages you may choose to install the certificate manually. This is done by clicking Install Certificate . 
 Please give me feedback on the steps you have taken and let me know if a new problem has arisen or if you were able to solve the problem! 
 Have a great weekend,

Extraction failure trying to install Intercept X

Top Replies