Thread Info
  • State Verified Answer
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 5 replies
  • Subscribers 14 subscribers
  • Views 2472 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Failure to deploy the endpoint agent from Datto rmm

Naser Masri

Hey Guys,
I am facing a problem with deploy the agent from Datto rmm. our client has arond 80 workstations and 17 of them is succed and they have sophos agent maar the rest not.
Here is the log file with the error from rmm.
Thanks for anyone can help!
2022-03-10T11:06:40.8641731Z INFO : Stage 1 command-line options:
2022-03-10T11:06:40.8641731Z INFO : ---
2022-03-10T11:06:40.8641731Z INFO : Quiet mode on: 0
2022-03-10T11:06:40.8651724Z INFO : Automatic Proxy detection disabled: 0
2022-03-10T11:06:40.8651724Z INFO : No feedback mode on: 0
2022-03-10T11:06:40.8651724Z INFO : Dump feedback enabled: 0
2022-03-10T11:06:40.8651724Z INFO : Bypass competitor removal: 1
2022-03-10T11:06:40.8651724Z INFO : Using CRT catalog file path: --
2022-03-10T11:06:40.8651724Z INFO : Only register endpoint with Central: 0
2022-03-10T11:06:40.8661723Z INFO : Log messages between endpoint and Central: 0
2022-03-10T11:06:40.8661723Z INFO : Log command-line passed to executables: 0
2022-03-10T11:06:40.8661723Z INFO : Using custom server that hosts the installer stage2 filename: --
2022-03-10T11:06:40.8671672Z INFO : Using cloud group: --
2022-03-10T11:06:40.8671672Z INFO : Overriding computer name: --
2022-03-10T11:06:40.8671672Z INFO : Overriding computer description: --
2022-03-10T11:06:40.8671672Z INFO : Overriding domain name: --
2022-03-10T11:06:40.8671672Z INFO : Language will be set to: --
2022-03-10T11:06:40.8671672Z INFO : Using message relays: --
2022-03-10T11:06:40.8681666Z INFO : Proxy address: --
2022-03-10T11:06:40.8681666Z INFO : Proxy user name: --
2022-03-10T11:06:40.8681666Z INFO : Using custom customer token: --
2022-03-10T11:06:40.8681666Z INFO : Using specified products: antivirus,intercept
2022-03-10T11:06:40.8691621Z INFO : Using certificates from the program data folder: 0
2022-03-10T11:06:40.8691621Z INFO : Using custom customer ID: --
2022-03-10T11:06:40.8691621Z INFO : Using specified user ID: --
2022-03-10T11:06:40.8691621Z INFO : Using local install source: --
2022-03-10T11:06:40.8701589Z INFO : Using experimental SRV: --
2022-03-10T11:06:40.8701589Z INFO : Invoked as part of SEC migration: 0
2022-03-10T11:06:40.8701589Z INFO : ---
2022-03-10T11:06:40.8721538Z INFO : Detected architecture: 2
2022-03-10T11:06:40.8721538Z INFO : Using x86 program files for stage 2
2022-03-10T11:06:40.8731513Z INFO : Target path: C:\\Program Files (x86)\\Sophos\\CloudInstaller
2022-03-10T11:06:40.8751466Z INFO : Running on x64, requesting x86 Stage2
2022-03-10T11:06:40.8751466Z INFO : Sending HTTP 'POST' request to: api/download/stage2-details/90f03e71-fd36-4a29-9195-d16256ad7816
2022-03-10T11:06:40.8985471Z INFO : Did not discover an URL for a PAC file
2022-03-10T11:06:40.8985471Z INFO : Attempting to connect using proxy '' of type 'Empty Proxy'.
2022-03-10T11:06:40.8995461Z INFO : Set security protocol: 00000800
2022-03-10T11:06:40.8995461Z INFO : Opening connection to api-CloudStation-eu-central-1.prod.hydra.sophos.com
2022-03-10T11:06:40.8995461Z INFO : Request content size: 31
2022-03-10T11:06:41.0360392Z INFO : Sending request
2022-03-10T11:06:41.0360392Z INFO : Request sent
2022-03-10T11:06:41.1347850Z INFO : Sending request
2022-03-10T11:06:41.1347850Z INFO : Request sent
2022-03-10T11:06:41.1359139Z INFO : Response status code: 200
2022-03-10T11:06:41.1362706Z INFO : Response data size: 179
2022-03-10T11:06:41.1362706Z INFO : trySendRequestThroughPotentialProxy returning response with status code: 200
2022-03-10T11:06:41.1372700Z INFO : Parsing message received for Stage 2 filename: '{"mcs_server":"mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com","stage2_filename":"stage2-1.13.270.0-c9eb102636db992ba3fd0e2de61b8532e1bfe03dc89ae5422bbb46d8cb22e34a.tar.gz"}'
2022-03-10T11:06:41.1372700Z INFO : Sending HTTP 'GET' request to: full/central/windows/business/installer/stage2-1.13.270.0-c9eb102636db992ba3fd0e2de61b8532e1bfe03dc89ae5422bbb46d8cb22e34a.tar.gz
2022-03-10T11:06:41.1382671Z INFO : Did not discover an URL for a PAC file
2022-03-10T11:06:41.1382671Z INFO : Attempting to connect using proxy '' of type 'Empty Proxy'.
2022-03-10T11:06:41.1402624Z INFO : Set security protocol: 00000800
2022-03-10T11:06:41.1402624Z INFO : Opening connection to downloads.sophos.com
2022-03-10T11:06:41.1402624Z INFO : Request content size: 0
2022-03-10T11:06:41.4077208Z INFO : Sending request
2022-03-10T11:06:41.4077208Z INFO : Request sent
2022-03-10T11:06:41.7210989Z INFO : Response status code: 200
2022-03-10T11:06:41.7221189Z INFO : Response data size: 3309155
2022-03-10T11:06:41.7231365Z INFO : trySendRequestThroughPotentialProxy returning response with status code: 200
2022-03-10T11:06:41.7270854Z INFO : Extracting files:
2022-03-10T11:06:41.7270854Z INFO : integrity.dat
2022-03-10T11:06:41.7330686Z INFO : manifest.dat
2022-03-10T11:06:41.7370578Z INFO : scf.dat
2022-03-10T11:06:41.7420481Z INFO : SDDS3.dll
2022-03-10T11:06:41.8157239Z INFO : sof.dat
2022-03-10T11:06:41.8197532Z INFO : SophosSetup_Stage2.exe
2022-03-10T11:06:41.9862569Z INFO : su-setup32.exe
2022-03-10T11:06:42.0922065Z INFO : su-setup64.exe
2022-03-10T11:06:42.1436414Z INFO : SUL.dll
2022-03-10T11:06:42.2274160Z INFO : Management Certs/sophosca1.crl
2022-03-10T11:06:42.2323966Z INFO : Management Certs/sophosca1.crt
2022-03-10T11:06:42.2384117Z INFO : Management Certs/sophosca2.crl
2022-03-10T11:06:42.2443635Z INFO : Management Certs/sophosca2.crt
2022-03-10T11:06:42.2503483Z INFO : Management Certs/sophosca3.crl
2022-03-10T11:06:42.2543684Z INFO : Management Certs/sophosca3.crt
2022-03-10T11:06:42.2593562Z INFO : Management Certs/sophosca4.crl
2022-03-10T11:06:42.2644052Z INFO : Management Certs/sophosca4.crt
2022-03-10T11:06:42.2684313Z INFO : ManifestCerts/rootca.crl
2022-03-10T11:06:42.2733830Z INFO : ManifestCerts/rootca.crt
2022-03-10T11:06:42.2774053Z INFO : ManifestCerts/rootca384.crl
2022-03-10T11:06:42.2830809Z INFO : ManifestCerts/rootca384.crt
2022-03-10T11:06:42.2902440Z INFO : Checking manifest:C:\\Program Files (x86)\\Sophos\\CloudInstaller\\extract_cache\\manifest.dat
2022-03-10T11:06:42.3679213Z INFO : Running setup.
Started C:\Program Files (x86)\Sophos\CloudInstaller\SophosSetup_Stage2.exe
2022-03-10T11:06:42.5575199Z INFO : Stage 2 command-line options:
2022-03-10T11:06:42.5575199Z INFO : ---
2022-03-10T11:06:42.5575199Z INFO : Parent PID: 12540
2022-03-10T11:06:42.5585179Z INFO : Server: mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com
2022-03-10T11:06:42.5585179Z INFO : Message relays: --
2022-03-10T11:06:42.5585179Z INFO : Suppressing feedback: 0
2022-03-10T11:06:42.5585179Z INFO : Dump feedback to disk: 0
2022-03-10T11:06:42.5585179Z INFO : Register only: 0
2022-03-10T11:06:42.5595192Z INFO : Trail logging: 0
2022-03-10T11:06:42.5595192Z INFO : Command-line logging: 0
2022-03-10T11:06:42.5595192Z INFO : Bypassing competitor removal: 1
2022-03-10T11:06:42.5595192Z INFO : CRT catalog: --
2022-03-10T11:06:42.5595192Z INFO : Language: --
2022-03-10T11:06:42.5595192Z INFO : Log files: C:\\ProgramData\\Sophos\\CloudInstaller\\Logs\\SophosCloudInstaller_20220310_110640.log
2022-03-10T11:06:42.5605116Z INFO : Group: --
2022-03-10T11:06:42.5605116Z INFO : Quiet: 0
2022-03-10T11:06:42.5605116Z INFO : Virtual appliance: 0
2022-03-10T11:06:42.5605116Z INFO : Proxy address: --
2022-03-10T11:06:42.5605116Z INFO : Proxy user: --
2022-03-10T11:06:42.5605116Z INFO : Overriding computer name: --
2022-03-10T11:06:42.5615085Z INFO : Overriding computer description: --
2022-03-10T11:06:42.5615085Z INFO : Overriding domain: --
2022-03-10T11:06:42.5615085Z INFO : Disable proxy detection: 0
2022-03-10T11:06:42.5615085Z INFO : Customer Token Specified: 90f03e71-fd36-4a29-9195-d16256ad7816
2022-03-10T11:06:42.5615085Z INFO : Products: antivirus,intercept
2022-03-10T11:06:42.5615085Z INFO : Pipe write handle: 1908
2022-03-10T11:06:42.5615085Z INFO : MCS Certificates Folder: 0
2022-03-10T11:06:42.5625056Z INFO : MCS Customer Id: --
2022-03-10T11:06:42.5625056Z INFO : User Id: --
2022-03-10T11:06:42.5625056Z INFO : Local install source: --
2022-03-10T11:06:42.5625056Z INFO : Name of SRV domain: --
2022-03-10T11:06:42.5625056Z INFO : Partner Id: 5ee56582-8464-8493-08b3-9de0b819b5e6
2022-03-10T11:06:42.5625056Z INFO : Customer Estate Id: --
2022-03-10T11:06:42.5635031Z INFO : Invoked as part of SEC migration: 0
2022-03-10T11:06:42.5635031Z INFO : ---
2022-03-10T11:06:42.5654978Z INFO : User name: SYSTEM
2022-03-10T11:06:42.5654978Z INFO : GetUserNameEx/NameDnsDomain: The user name is not available in the specified format. Assuming non-Domain computer.
2022-03-10T11:06:42.5654978Z INFO : User profile loaded
2022-03-10T11:06:42.5664947Z INFO : Model::server value changed to: mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com
2022-03-10T11:06:42.5664947Z INFO : Model::messageRelays value changed to be size: 0
2022-03-10T11:06:42.5664947Z INFO : Model::group value changed to:
2022-03-10T11:06:42.5664947Z INFO : Model::parentPid value changed to: 12540
2022-03-10T11:06:42.5664947Z INFO : Model::products changed to: antivirus, intercept
2022-03-10T11:06:42.5674921Z INFO : Model::customer token value changed to: 90f03e71-fd36-4a29-9195-d16256ad7816
2022-03-10T11:06:42.5674921Z INFO : MCS Crts: C:\\Program Files (x86)\\Sophos\\CloudInstaller\\Management Certs\\sophosca1.crt,C:\\Program Files (x86)\\Sophos\\CloudInstaller\\Management Certs\\sophosca2.crt,C:\\Program Files (x86)\\Sophos\\CloudInstaller\\Management Certs\\sophosca3.crt,C:\\Program Files (x86)\\Sophos\\CloudInstaller\\Management Certs\\sophosca4.crt
2022-03-10T11:06:42.5674921Z INFO : MCS CRLs: C:\\Program Files (x86)\\Sophos\\CloudInstaller\\Management Certs\\sophosca1.crl,C:\\Program Files (x86)\\Sophos\\CloudInstaller\\Management Certs\\sophosca2.crl,C:\\Program Files (x86)\\Sophos\\CloudInstaller\\Management Certs\\sophosca3.crl,C:\\Program Files (x86)\\Sophos\\CloudInstaller\\Management Certs\\sophosca4.crl
2022-03-10T11:06:42.5674921Z INFO : Sophos Endpoint Defense is not installed
2022-03-10T11:06:42.5684900Z INFO : Not tamper-protected by SED
2022-03-10T11:06:42.5684900Z INFO : detectedMsiInstalledMcs.installed: 0
2022-03-10T11:06:42.5684900Z INFO : Not migrating from SEC endpoint.
2022-03-10T11:06:42.5694882Z INFO : Beginning command definition.
2022-03-10T11:06:42.5694882Z INFO : Adding command to remove Sophos 'Image File Execution Options' keys.
2022-03-10T11:06:42.5694882Z INFO : Adding command to wait for SAU update to complete.
2022-03-10T11:06:42.5704854Z INFO : Adding competitor detection command.
2022-03-10T11:06:42.5704854Z INFO : Adding command to register with Sophos cloud.
2022-03-10T11:06:42.5704854Z INFO : Adding command to download product suite.
2022-03-10T11:06:42.5704854Z INFO : Adding command to uninstall existing products.
2022-03-10T11:06:42.5704854Z INFO : Adding command to remove existing installation of Sophos AutoUpdate
2022-03-10T11:06:42.5704854Z INFO : Adding command to allow tamper protected reinstalls.
2022-03-10T11:06:42.5714812Z INFO : Adding commands to uninstall remaining existing products.
2022-03-10T11:06:42.5714812Z INFO : Adding command to remove existing installation of Sophos System Protection
2022-03-10T11:06:42.5714812Z INFO : Adding command to remove existing installation of Sophos Heartbeat
2022-03-10T11:06:42.5714812Z INFO : Adding command to remove existing installation of Sophos Network Access Control
2022-03-10T11:06:42.5714812Z INFO : Adding command to remove existing installation of Sophos Client Firewall
2022-03-10T11:06:42.5724782Z INFO : Adding command to remove existing installation of Sophos Patch
2022-03-10T11:06:42.5724782Z INFO : Adding command to remove existing installation of Sophos Clean
2022-03-10T11:06:42.5724782Z INFO : Adding command to retrieve policy.
2022-03-10T11:06:42.5724782Z INFO : Adding command to prepare for installation.
2022-03-10T11:06:42.5724782Z INFO : Adding command to install Sophos agent.
2022-03-10T11:06:42.5734786Z INFO : Command definition complete.
2022-03-10T11:06:42.5734786Z INFO : Stage 1 version:1.13.270.0
2022-03-10T11:06:42.5734786Z INFO : Stage 2 version:1.13.270.0
2022-03-10T11:06:42.5744735Z INFO : OS version: 10.0.19044.
2022-03-10T11:06:42.5744735Z INFO : Service pack: 0.0.
2022-03-10T11:06:42.5744735Z INFO : System Language: 1043.
2022-03-10T11:06:42.5744735Z INFO : User Language: 1043.
2022-03-10T11:06:42.5744735Z INFO : 64 bit: yes.
2022-03-10T11:06:42.5754706Z INFO : FindMainWindow: pid=12540
2022-03-10T11:06:42.5754706Z INFO : Window is main control window of process
2022-03-10T11:06:42.5754706Z INFO : ::EnumWindows stopped early; window found
2022-03-10T11:06:42.5754706Z INFO : _bestHandle=000202E6
2022-03-10T11:06:42.9917957Z INFO : Running System Property Check: VerifyTrust ...
2022-03-10T11:06:43.0376373Z INFO : System Property Check: VerifyTrust - PASSED
2022-03-10T11:06:43.1019174Z INFO : Running System Property Check: HostnameLength ...
2022-03-10T11:06:43.1029230Z INFO : Initialized Winsock subsystem
2022-03-10T11:06:43.1080345Z INFO : Valid hostname length
2022-03-10T11:06:43.1097324Z INFO : System Property Check: HostnameLength - PASSED
2022-03-10T11:06:43.1636521Z INFO : Running System Property Check: GroupNameLength ...
2022-03-10T11:06:43.1636521Z INFO : System Property Check: GroupNameLength - PASSED
2022-03-10T11:06:43.2265420Z INFO : Running System Property Check: IsAdministrator ...
2022-03-10T11:06:43.2265420Z INFO : System Property Check: IsAdministrator - PASSED
2022-03-10T11:06:43.2888931Z INFO : Running System Property Check: JunctionPointsCheck ...
2022-03-10T11:06:43.2926705Z INFO : Scanned 65 Sophos paths for junction points
2022-03-10T11:06:43.2936445Z INFO : System Property Check: JunctionPointsCheck - PASSED
2022-03-10T11:06:43.3509991Z INFO : Running System Property Check: PendingReboots ...
2022-03-10T11:06:43.3520029Z WARNING : System Property Check: System PendingReboots - FAILED
2022-03-10T11:06:43.4140388Z INFO : Running System Property Check: PrimaryDriveSpace ...
2022-03-10T11:06:43.4140388Z INFO : Enough space: 82338 Mb
2022-03-10T11:06:43.4150417Z INFO : System Property Check: PrimaryDriveSpace - PASSED
2022-03-10T11:06:43.4758348Z INFO : Running System Property Check: MsXml ...
2022-03-10T11:06:43.4828188Z INFO : System Property Check: MsXml - PASSED
2022-03-10T11:06:43.5388671Z INFO : Running System Property Check: NotFirewall ...
2022-03-10T11:06:43.5397206Z INFO : System Property Check: NotFirewall - PASSED
2022-03-10T11:06:43.6008929Z INFO : Running System Property Check: NotHitmanProAlertIncompatible ...
2022-03-10T11:06:43.6018587Z INFO : No HitmanPro.Alert Installed
2022-03-10T11:06:43.6018587Z INFO : System Property Check: NotHitmanProAlertIncompatible - PASSED
2022-03-10T11:06:43.6620836Z INFO : Running System Property Check: NotInvincea ...
2022-03-10T11:06:43.6620836Z INFO : System Property Check: NotInvincea - PASSED
2022-03-10T11:06:43.7230182Z INFO : Running System Property Check: NotMessageRelay ...
2022-03-10T11:06:43.7230182Z INFO : RMS is not installed on the endpoint
2022-03-10T11:06:43.7230182Z INFO : System Property Check: NotMessageRelay - PASSED
2022-03-10T11:06:43.7850755Z INFO : Running System Property Check: NotNac ...
2022-03-10T11:06:43.7850755Z INFO : System Property Check: NotNac - PASSED
2022-03-10T11:06:43.8462711Z INFO : Running System Property Check: NotPatch ...
2022-03-10T11:06:43.8462711Z INFO : System Property Check: NotPatch - PASSED
2022-03-10T11:06:43.9081068Z INFO : Running System Property Check: NotPureMessageDomino ...
2022-03-10T11:06:43.9081068Z INFO : System Property Check: NotPureMessageDomino - PASSED
2022-03-10T11:06:43.9704880Z INFO : Running System Property Check: NotPureMessageExchangeWithAntiSpam ...
2022-03-10T11:06:43.9704880Z INFO : System Property Check: NotPureMessageExchangeWithAntiSpam - PASSED
2022-03-10T11:06:44.0308317Z INFO : Running System Property Check: NotSharePoint ...
2022-03-10T11:06:44.0308317Z INFO : System Property Check: NotSharePoint - PASSED
2022-03-10T11:06:44.0923847Z INFO : Running System Property Check: NotSecServer ...
2022-03-10T11:06:44.0923847Z INFO : System Property Check: NotSecServer - PASSED
2022-03-10T11:06:44.1562101Z INFO : Running System Property Check: NotSum ...
2022-03-10T11:06:44.1562101Z INFO : System Property Check: NotSum - PASSED
2022-03-10T11:06:44.2190084Z INFO : Running System Property Check: NotBlockedByTamperProtection ...
2022-03-10T11:06:44.2194578Z INFO : Not tamper protected
2022-03-10T11:06:44.2194578Z INFO : System Property Check: NotBlockedByTamperProtection - PASSED
2022-03-10T11:06:44.2810817Z INFO : Running System Property Check: RAMSize ...
2022-03-10T11:06:44.2810817Z INFO : System Property Check: RAMSize - PASSED
2022-03-10T11:06:44.3432464Z INFO : Running System Property Check: SupportedArchitecture ...
2022-03-10T11:06:44.3432464Z INFO : Running on x64
2022-03-10T11:06:44.3442104Z INFO : System Property Check: SupportedArchitecture - PASSED
2022-03-10T11:06:44.4070433Z INFO : Running System Property Check: SupportedOS ...
2022-03-10T11:06:44.4070433Z INFO : Running on workstation.
2022-03-10T11:06:44.4070433Z INFO : System Property Check: SupportedOS - PASSED
2022-03-10T11:06:44.4688488Z INFO : Running System Property Check: SupportedPatches ...
2022-03-10T11:06:44.4688488Z INFO : System Property Check: SupportedPatches - PASSED
2022-03-10T11:06:44.5307836Z INFO : Running System Property Check: ValidTempDirectory ...
2022-03-10T11:06:44.5307836Z INFO : Temp folder exists.
2022-03-10T11:06:44.5317471Z INFO : System Property Check: ValidTempDirectory - PASSED
2022-03-10T11:06:44.5935802Z INFO : Running System Property Check: ValidLocalInstallSourceDirectory ...
2022-03-10T11:06:44.5935802Z INFO : No local install source folder to validate.
2022-03-10T11:06:44.5935802Z INFO : System Property Check: ValidLocalInstallSourceDirectory - PASSED
2022-03-10T11:06:44.6569574Z INFO : Running System Property Check: ValidServer ...
2022-03-10T11:06:44.6569574Z INFO : System Property Check: ValidServer - PASSED
2022-03-10T11:06:44.7174287Z INFO : Running System Property Check: ValidDeploymentInfo ...
2022-03-10T11:06:44.7174287Z INFO : Current Time: 2022-03-10T11:06:44.717000
2022-03-10T11:06:44.7184033Z INFO : This computer is part of the workgroup: WORKGROUP
2022-03-10T11:06:44.7184033Z INFO : Domain Name: WORKGROUP
2022-03-10T11:06:44.7194001Z INFO : Computer Name: DESKTOP-HDKK7PT
2022-03-10T11:06:44.7195322Z INFO : Computer Description is not available.
2022-03-10T11:06:44.7195322Z INFO : Operating system friendly name: Windows 10 Pro
2022-03-10T11:06:44.7195322Z INFO : Operating system for status: WIN10
2022-03-10T11:06:44.7195322Z INFO : ProductType: 48
2022-03-10T11:06:44.7205323Z INFO : Session user: \\
2022-03-10T11:06:44.7215298Z INFO : Not sending last logged on user. Session user different from running user: WORKGROUP\\DESKTOP-HDKK7PT$
2022-03-10T11:06:44.7225339Z INFO : Fully Qualified Domain Name: DESKTOP-HDKK7PT
2022-03-10T11:06:44.7235277Z INFO : Processor architecture: x64
2022-03-10T11:06:44.7235277Z INFO : OS Major Version: 10 and OS Minor Version: 0
2022-03-10T11:06:44.7235277Z INFO : Friendly OS Name: WIN10
2022-03-10T11:06:44.7235277Z INFO : Is server?: 0
2022-03-10T11:06:44.7254709Z INFO : Sending HTTP 'POST' request to: sophos/management/ep/install/deployment-info/3
2022-03-10T11:06:44.7289462Z INFO : Did not discover an URL for a PAC file
2022-03-10T11:06:44.7289462Z INFO : Attempting to connect using proxy '' of type 'Empty Proxy'.
2022-03-10T11:06:44.7299457Z INFO : Set security protocol: 00000800
2022-03-10T11:06:44.7299457Z INFO : Opening connection to mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com
2022-03-10T11:06:44.7299457Z INFO : Sending request for connection confirmation through potential proxy
2022-03-10T11:06:44.7299457Z INFO : Request content size: 0
2022-03-10T11:06:44.8518532Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
2022-03-10T11:06:44.8528510Z INFO : Subject certificate failed validation against root CA: SophosCA1
2022-03-10T11:06:44.8538810Z INFO : Subject certificate failed validation against root CA: SophosCA2
2022-03-10T11:06:44.8568391Z INFO : Certificate check succeeded
2022-03-10T11:06:44.8568391Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
2022-03-10T11:06:44.9834566Z INFO : Response status code: 200
2022-03-10T11:06:44.9834566Z INFO : Response data size: 168
2022-03-10T11:06:44.9834566Z INFO : trySendRequestThroughPotentialProxy returning response with status code: 200
2022-03-10T11:06:44.9844567Z INFO : Request content size: 1492
2022-03-10T11:06:44.9847331Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
2022-03-10T11:06:44.9857656Z INFO : Subject certificate failed validation against root CA: SophosCA1
2022-03-10T11:06:44.9857656Z INFO : Subject certificate failed validation against root CA: SophosCA2
2022-03-10T11:06:44.9887252Z INFO : Certificate check succeeded
2022-03-10T11:06:44.9887252Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
2022-03-10T11:06:45.0323745Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
2022-03-10T11:06:45.0333747Z INFO : Subject certificate failed validation against root CA: SophosCA1
2022-03-10T11:06:45.0333747Z INFO : Subject certificate failed validation against root CA: SophosCA2
2022-03-10T11:06:45.0363654Z INFO : Certificate check succeeded
2022-03-10T11:06:45.0366150Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
2022-03-10T11:06:45.0366150Z INFO : Response status code: 200
2022-03-10T11:06:45.0366150Z INFO : Response data size: 215
2022-03-10T11:06:45.0366150Z INFO : Parsing message received for deployment token: {"dciFileName":"19f038e8cd76e417cd405de4871e8fa9","registrationToken":"f7bc4e4906397a7c4ff5681d7389f9425a34af443618915dff3a3f6775db766c","products":[{"product":"INTERCEPT_ESSENTIALS","supported":true,"reasons":[]}]}
2022-03-10T11:06:45.0366150Z INFO : Model::token value changed to: f7bc4e4906397a7c4ff5681d7389f9425a34af443618915dff3a3f6775db766c
2022-03-10T11:06:45.0376478Z INFO : Licenses available: INTERCEPT_ESSENTIALS
2022-03-10T11:06:45.0928387Z INFO : Running System Property Check: InstallationInProgress ...
2022-03-10T11:06:45.0928387Z INFO : System Property Check: InstallationInProgress - PASSED
2022-03-10T11:06:45.1548307Z INFO : Running System Property Check: SafeGuardEncryption ...
2022-03-10T11:06:45.1548307Z INFO : Entered installedProductCode, upgradeCode={BA2F47D3-1C17-40E7-8DE7-1CD733442B6C}
2022-03-10T11:06:45.1558336Z INFO : Product is not installed
2022-03-10T11:06:45.1558336Z INFO : licensesContainFeature(DEVICE_ENCRYPTION): false
2022-03-10T11:06:45.1558336Z INFO : System Property Check: SafeGuardEncryption - PASSED
{

}



This thread was automatically locked due to age.
  • 0

    Hello Naser Masri,

    I'm not familiar with the Cloudinstaller and its log but it looks like the above is not complete.
    Unfortunately the RMM doesn't provide timestamps and I'm not sure what to make of the Sophos is currently running message, you don't have the output from a device where it worked, do you?

    Christian

  • 0

    Hello Christian,

    Thanks for your fast reply!
    It is well a good idea! I will try to contact one of the end user which it workd for him/her.

    regards!

  • 0 in reply to QC

    Good morning Christian,

    I have got the log files from the client (which is the installation worked on his pc), it is 4 files instead of 2 is it because 2 failed from before or duplicate?
    thanks for your help.Log_Stijn.log

    Fullscreen Log_Stijn2.log Download 
    Started C:\WINDOWS\TEMP\sfl-c6999300\Setup.exe
2022-03-11T08:39:16.5165377Z INFO : Stage 1 command-line options:
2022-03-11T08:39:16.5165377Z INFO : ---
2022-03-11T08:39:16.5165377Z INFO : Quiet mode on: 0
2022-03-11T08:39:16.5165377Z INFO : Automatic Proxy detection disabled: 0
2022-03-11T08:39:16.5175407Z INFO : No feedback mode on: 0
2022-03-11T08:39:16.5175407Z INFO : Dump feedback enabled: 0
2022-03-11T08:39:16.5175407Z INFO : Bypass competitor removal: 1
2022-03-11T08:39:16.5175407Z INFO : Using CRT catalog file path: --
2022-03-11T08:39:16.5185353Z INFO : Only register endpoint with Central: 0
2022-03-11T08:39:16.5185353Z INFO : Log messages between endpoint and Central: 0
2022-03-11T08:39:16.5245763Z INFO : Log command-line passed to executables: 0
2022-03-11T08:39:16.5256298Z INFO : Using custom server that hosts the installer stage2 filename: --
2022-03-11T08:39:16.5256298Z INFO : Using cloud group: --
2022-03-11T08:39:16.5266296Z INFO : Overriding computer name: --
2022-03-11T08:39:16.5275867Z INFO : Overriding computer description: --
2022-03-11T08:39:16.5285812Z INFO : Overriding domain name: --
2022-03-11T08:39:16.5285812Z INFO : Language will be set to: --
2022-03-11T08:39:16.5295783Z INFO : Using message relays: --
2022-03-11T08:39:16.5305716Z INFO : Proxy address: --
2022-03-11T08:39:16.5315711Z INFO : Proxy user name: --
2022-03-11T08:39:16.5315711Z INFO : Using custom customer token: --
2022-03-11T08:39:16.5325651Z INFO : Using specified products: antivirus,intercept
2022-03-11T08:39:16.5325651Z INFO : Using certificates from the program data folder: 0
2022-03-11T08:39:16.5335632Z INFO : Using custom customer ID: --
2022-03-11T08:39:16.5345634Z INFO : Using specified user ID: --
2022-03-11T08:39:16.5345634Z INFO : Using local install source: --
2022-03-11T08:39:16.5355589Z INFO : Using experimental SRV: --
2022-03-11T08:39:16.5355589Z INFO : Invoked as part of SEC migration: 0
2022-03-11T08:39:16.5365596Z INFO : ---
2022-03-11T08:39:16.5415652Z INFO : Detected architecture: 2
2022-03-11T08:39:16.5415652Z INFO : Using x86 program files for stage 2
2022-03-11T08:39:16.5425381Z INFO : Target path: C:\\Program Files (x86)\\Sophos\\CloudInstaller
2022-03-11T08:39:16.5684695Z INFO : Running on x64, requesting x86 Stage2
2022-03-11T08:39:16.5694948Z INFO : Sending HTTP 'POST' request to: api/download/stage2-details/90f03e71-fd36-4a29-9195-d16256ad7816
2022-03-11T08:39:16.6329352Z INFO : Did not discover an URL for a PAC file
2022-03-11T08:39:16.6329352Z INFO : Attempting to connect using proxy '' of type 'Empty Proxy'.
2022-03-11T08:39:16.6349280Z INFO : Set security protocol: 00000800
2022-03-11T08:39:16.6349280Z INFO : Opening connection to api-CloudStation-eu-central-1.prod.hydra.sophos.com
2022-03-11T08:39:16.6349280Z INFO : Request content size: 31
2022-03-11T08:39:16.8041091Z INFO : Sending request
2022-03-11T08:39:16.8041091Z INFO : Request sent
2022-03-11T08:39:16.8464046Z INFO : Sending request
2022-03-11T08:39:16.8464046Z INFO : Request sent
2022-03-11T08:39:16.8474008Z INFO : Response status code: 200
2022-03-11T08:39:16.8474008Z INFO : Response data size: 179
2022-03-11T08:39:16.8474008Z INFO : trySendRequestThroughPotentialProxy returning response with status code: 200
2022-03-11T08:39:16.8483981Z INFO : Parsing message received for Stage 2 filename: '{"mcs_server":"mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com","stage2_filename":"stage2-1.13.270.0-c9eb102636db992ba3fd0e2de61b8532e1bfe03dc89ae5422bbb46d8cb22e34a.tar.gz"}'
2022-03-11T08:39:16.8483981Z INFO : Sending HTTP 'GET' request to: full/central/windows/business/installer/stage2-1.13.270.0-c9eb102636db992ba3fd0e2de61b8532e1bfe03dc89ae5422bbb46d8cb22e34a.tar.gz
2022-03-11T08:39:16.8513890Z INFO : Did not discover an URL for a PAC file
2022-03-11T08:39:16.8513890Z INFO : Attempting to connect using proxy '' of type 'Empty Proxy'.
2022-03-11T08:39:16.8523857Z INFO : Set security protocol: 00000800
2022-03-11T08:39:16.8533876Z INFO : Opening connection to downloads.sophos.com
2022-03-11T08:39:16.8533876Z INFO : Request content size: 0
2022-03-11T08:39:17.1581699Z INFO : Sending request
2022-03-11T08:39:17.1591675Z INFO : Request sent
2022-03-11T08:39:17.6168548Z INFO : Response status code: 200
2022-03-11T08:39:17.6188469Z INFO : Response data size: 3309155
2022-03-11T08:39:17.6198441Z INFO : trySendRequestThroughPotentialProxy returning response with status code: 200
2022-03-11T08:39:17.6258262Z INFO : Extracting files:
2022-03-11T08:39:17.6268244Z INFO : integrity.dat
2022-03-11T08:39:17.6417875Z INFO : manifest.dat
2022-03-11T08:39:17.6577420Z INFO : scf.dat
2022-03-11T08:39:17.6717057Z INFO : SDDS3.dll
2022-03-11T08:39:17.7863986Z INFO : sof.dat
2022-03-11T08:39:17.7984866Z INFO : SophosSetup_Stage2.exe
2022-03-11T08:39:18.0558043Z INFO : su-setup32.exe
2022-03-11T08:39:18.2353245Z INFO : su-setup64.exe
2022-03-11T08:39:18.3191040Z INFO : SUL.dll
2022-03-11T08:39:18.4258184Z INFO : Management Certs/sophosca1.crl
2022-03-11T08:39:18.4328032Z INFO : Management Certs/sophosca1.crt
2022-03-11T08:39:18.4443814Z INFO : Management Certs/sophosca2.crl
2022-03-11T08:39:18.4533680Z INFO : Management Certs/sophosca2.crt
2022-03-11T08:39:18.4593375Z INFO : Management Certs/sophosca3.crl
2022-03-11T08:39:18.4732704Z INFO : Management Certs/sophosca3.crt
2022-03-11T08:39:18.4796508Z INFO : Management Certs/sophosca4.crl
2022-03-11T08:39:18.4933496Z INFO : Management Certs/sophosca4.crt
2022-03-11T08:39:18.5033272Z INFO : ManifestCerts/rootca.crl
2022-03-11T08:39:18.5093549Z INFO : ManifestCerts/rootca.crt
2022-03-11T08:39:18.5183428Z INFO : ManifestCerts/rootca384.crl
2022-03-11T08:39:18.5313153Z INFO : ManifestCerts/rootca384.crt
2022-03-11T08:39:18.5458687Z INFO : Checking manifest:C:\\Program Files (x86)\\Sophos\\CloudInstaller\\extract_cache\\manifest.dat
2022-03-11T08:39:18.6477485Z INFO : Running setup.
Started C:\Program Files (x86)\Sophos\CloudInstaller\SophosSetup_Stage2.exe
2022-03-11T08:39:18.9908377Z INFO : Stage 2 command-line options:
2022-03-11T08:39:18.9908377Z INFO : ---
2022-03-11T08:39:18.9908377Z INFO : Parent PID: 10456
2022-03-11T08:39:18.9908377Z INFO : Server: mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com
2022-03-11T08:39:18.9908377Z INFO : Message relays: --
2022-03-11T08:39:18.9918333Z INFO : Suppressing feedback: 0
2022-03-11T08:39:18.9918333Z INFO : Dump feedback to disk: 0
2022-03-11T08:39:18.9918333Z INFO : Register only: 0
2022-03-11T08:39:18.9918333Z INFO : Trail logging: 0
2022-03-11T08:39:18.9918333Z INFO : Command-line logging: 0
2022-03-11T08:39:18.9918333Z INFO : Bypassing competitor removal: 1
2022-03-11T08:39:18.9918333Z INFO : CRT catalog: --
2022-03-11T08:39:18.9928319Z INFO : Language: --
2022-03-11T08:39:18.9928319Z INFO : Log files: C:\\ProgramData\\Sophos\\CloudInstaller\\Logs\\SophosCloudInstaller_20220311_083916.log
2022-03-11T08:39:18.9928319Z INFO : Group: --
2022-03-11T08:39:18.9928319Z INFO : Quiet: 0
2022-03-11T08:39:18.9928319Z INFO : Virtual appliance: 0
2022-03-11T08:39:18.9928319Z INFO : Proxy address: --
2022-03-11T08:39:18.9938300Z INFO : Proxy user: --
2022-03-11T08:39:18.9938300Z INFO : Overriding computer name: --
2022-03-11T08:39:18.9938300Z INFO : Overriding computer description: --
2022-03-11T08:39:18.9938300Z INFO : Overriding domain: --
2022-03-11T08:39:18.9938300Z INFO : Disable proxy detection: 0
2022-03-11T08:39:18.9938300Z INFO : Customer Token Specified: 90f03e71-fd36-4a29-9195-d16256ad7816
2022-03-11T08:39:18.9938300Z INFO : Products: antivirus,intercept
2022-03-11T08:39:18.9948312Z INFO : Pipe write handle: 1856
2022-03-11T08:39:18.9948312Z INFO : MCS Certificates Folder: 0
2022-03-11T08:39:18.9948312Z INFO : MCS Customer Id: --
2022-03-11T08:39:18.9948312Z INFO : User Id: --
2022-03-11T08:39:18.9958243Z INFO : Local install source: --
2022-03-11T08:39:18.9958243Z INFO : Name of SRV domain: --
2022-03-11T08:39:18.9958243Z INFO : Partner Id: 5ee56582-8464-8493-08b3-9de0b819b5e6
2022-03-11T08:39:18.9958243Z INFO : Customer Estate Id: --
2022-03-11T08:39:18.9958243Z INFO : Invoked as part of SEC migration: 0
2022-03-11T08:39:18.9968216Z INFO : ---
2022-03-11T08:39:18.9998133Z INFO : User name: SYSTEM
2022-03-11T08:39:19.0008099Z INFO : GetUserNameEx/NameDnsDomain: The user name is not available in the specified format. Assuming non-Domain computer.
2022-03-11T08:39:19.0008099Z INFO : User profile loaded
2022-03-11T08:39:19.0008099Z INFO : Model::server value changed to: mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com
2022-03-11T08:39:19.0018069Z INFO : Model::messageRelays value changed to be size: 0
2022-03-11T08:39:19.0018069Z INFO : Model::group value changed to: 
2022-03-11T08:39:19.0018069Z INFO : Model::parentPid value changed to: 10456
2022-03-11T08:39:19.0018069Z INFO : Model::products changed to: antivirus, intercept
2022-03-11T08:39:19.0028039Z INFO : Model::customer token value changed to: 90f03e71-fd36-4a29-9195-d16256ad7816
2022-03-11T08:39:19.0028039Z INFO : MCS Crts: C:\\Program Files (x86)\\Sophos\\CloudInstaller\\Management Certs\\sophosca1.crt,C:\\Program Files (x86)\\Sophos\\CloudInstaller\\Management Certs\\sophosca2.crt,C:\\Program Files (x86)\\Sophos\\CloudInstaller\\Management Certs\\sophosca3.crt,C:\\Program Files (x86)\\Sophos\\CloudInstaller\\Management Certs\\sophosca4.crt
2022-03-11T08:39:19.0038027Z INFO : MCS CRLs: C:\\Program Files (x86)\\Sophos\\CloudInstaller\\Management Certs\\sophosca1.crl,C:\\Program Files (x86)\\Sophos\\CloudInstaller\\Management Certs\\sophosca2.crl,C:\\Program Files (x86)\\Sophos\\CloudInstaller\\Management Certs\\sophosca3.crl,C:\\Program Files (x86)\\Sophos\\CloudInstaller\\Management Certs\\sophosca4.crl
2022-03-11T08:39:19.0038027Z INFO : Sophos Endpoint Defense is not installed
2022-03-11T08:39:19.0038027Z INFO : Not tamper-protected by SED
2022-03-11T08:39:19.0047994Z INFO : detectedMsiInstalledMcs.installed: 0
2022-03-11T08:39:19.0047994Z INFO : Not migrating from SEC endpoint.
2022-03-11T08:39:19.0057962Z INFO : Beginning command definition.
2022-03-11T08:39:19.0057962Z INFO : Adding command to remove Sophos 'Image File Execution Options' keys.
2022-03-11T08:39:19.0057962Z INFO : Adding command to wait for SAU update to complete.
2022-03-11T08:39:19.0057962Z INFO : Adding competitor detection command.
2022-03-11T08:39:19.0067953Z INFO : Adding command to register with Sophos cloud.
2022-03-11T08:39:19.0067953Z INFO : Adding command to download product suite.
2022-03-11T08:39:19.0067953Z INFO : Adding command to uninstall existing products.
2022-03-11T08:39:19.0067953Z INFO : Adding command to remove existing installation of Sophos AutoUpdate
2022-03-11T08:39:19.0067953Z INFO : Adding command to allow tamper protected reinstalls.
2022-03-11T08:39:19.0077936Z INFO : Adding commands to uninstall remaining existing products.
2022-03-11T08:39:19.0077936Z INFO : Adding command to remove existing installation of Sophos System Protection
2022-03-11T08:39:19.0077936Z INFO : Adding command to remove existing installation of Sophos Heartbeat
2022-03-11T08:39:19.0087923Z INFO : Adding command to remove existing installation of Sophos Network Access Control
2022-03-11T08:39:19.0087923Z INFO : Adding command to remove existing installation of Sophos Client Firewall
2022-03-11T08:39:19.0087923Z INFO : Adding command to remove existing installation of Sophos Patch
2022-03-11T08:39:19.0097858Z INFO : Adding command to remove existing installation of Sophos Clean
2022-03-11T08:39:19.0097858Z INFO : Adding command to retrieve policy.
2022-03-11T08:39:19.0097858Z INFO : Adding command to prepare for installation.
2022-03-11T08:39:19.0097858Z INFO : Adding command to install Sophos agent.
2022-03-11T08:39:19.0097858Z INFO : Command definition complete.
2022-03-11T08:39:19.0107828Z INFO : Stage 1 version:1.13.270.0
2022-03-11T08:39:19.0107828Z INFO : Stage 2 version:1.13.270.0
2022-03-11T08:39:19.0107828Z INFO : OS version: 10.0.19044.
2022-03-11T08:39:19.0107828Z INFO : Service pack: 0.0.
2022-03-11T08:39:19.0107828Z INFO : System Language: 1043.
2022-03-11T08:39:19.0117864Z INFO : User Language: 1043.
2022-03-11T08:39:19.0117864Z INFO : 64 bit: yes.
2022-03-11T08:39:19.0117864Z INFO : FindMainWindow: pid=10456
2022-03-11T08:39:19.0117864Z INFO : Window is main control window of process
2022-03-11T08:39:19.0117864Z INFO : ::EnumWindows stopped early; window found
2022-03-11T08:39:19.0117864Z INFO : _bestHandle=00AB0094
2022-03-11T08:39:19.4881462Z INFO : Running System Property Check: VerifyTrust ...
2022-03-11T08:39:19.5550133Z INFO : System Property Check: VerifyTrust - PASSED
2022-03-11T08:39:19.6129984Z INFO : Running System Property Check: HostnameLength ...
2022-03-11T08:39:19.6189371Z INFO : Initialized Winsock subsystem
2022-03-11T08:39:19.6338940Z INFO : Valid hostname length
2022-03-11T08:39:19.6358835Z INFO : System Property Check: HostnameLength - PASSED
2022-03-11T08:39:19.6904846Z INFO : Running System Property Check: GroupNameLength ...
2022-03-11T08:39:19.6914838Z INFO : System Property Check: GroupNameLength - PASSED
2022-03-11T08:39:19.7532465Z INFO : Running System Property Check: IsAdministrator ...
2022-03-11T08:39:19.7542456Z INFO : System Property Check: IsAdministrator - PASSED
2022-03-11T08:39:19.8166406Z INFO : Running System Property Check: JunctionPointsCheck ...
2022-03-11T08:39:19.8294234Z INFO : Scanned 66 Sophos paths for junction points
2022-03-11T08:39:19.8294234Z INFO : System Property Check: JunctionPointsCheck - PASSED
2022-03-11T08:39:19.8942996Z INFO : Running System Property Check: PendingReboots ...
2022-03-11T08:39:19.8942996Z WARNING : System Property Check: System PendingReboots - FAILED
2022-03-11T08:39:19.9565687Z INFO : Running System Property Check: PrimaryDriveSpace ...
2022-03-11T08:39:19.9565687Z INFO : Enough space: 152469 Mb
2022-03-11T08:39:19.9575722Z INFO : System Property Check: PrimaryDriveSpace - PASSED
2022-03-11T08:39:20.0173374Z INFO : Running System Property Check: MsXml ...
2022-03-11T08:39:20.0628338Z INFO : System Property Check: MsXml - PASSED
2022-03-11T08:39:20.1271804Z INFO : Running System Property Check: NotFirewall ...
2022-03-11T08:39:20.1271804Z INFO : System Property Check: NotFirewall - PASSED
2022-03-11T08:39:20.1891632Z INFO : Running System Property Check: NotHitmanProAlertIncompatible ...
2022-03-11T08:39:20.1891632Z INFO : No HitmanPro.Alert Installed
2022-03-11T08:39:20.1899344Z INFO : System Property Check: NotHitmanProAlertIncompatible - PASSED
2022-03-11T08:39:20.2527411Z INFO : Running System Property Check: NotInvincea ...
2022-03-11T08:39:20.2527411Z INFO : System Property Check: NotInvincea - PASSED
2022-03-11T08:39:20.3155542Z INFO : Running System Property Check: NotMessageRelay ...
2022-03-11T08:39:20.3165460Z INFO : RMS is not installed on the endpoint
2022-03-11T08:39:20.3165460Z INFO : System Property Check: NotMessageRelay - PASSED
2022-03-11T08:39:20.3780744Z INFO : Running System Property Check: NotNac ...
2022-03-11T08:39:20.3780744Z INFO : System Property Check: NotNac - PASSED
2022-03-11T08:39:20.4410956Z INFO : Running System Property Check: NotPatch ...
2022-03-11T08:39:20.4410956Z INFO : System Property Check: NotPatch - PASSED
2022-03-11T08:39:20.5017989Z INFO : Running System Property Check: NotPureMessageDomino ...
2022-03-11T08:39:20.5017989Z INFO : System Property Check: NotPureMessageDomino - PASSED
2022-03-11T08:39:20.5649611Z INFO : Running System Property Check: NotPureMessageExchangeWithAntiSpam ...
2022-03-11T08:39:20.5649611Z INFO : System Property Check: NotPureMessageExchangeWithAntiSpam - PASSED
2022-03-11T08:39:20.6260194Z INFO : Running System Property Check: NotSharePoint ...
2022-03-11T08:39:20.6260194Z INFO : System Property Check: NotSharePoint - PASSED
2022-03-11T08:39:20.6898911Z INFO : Running System Property Check: NotSecServer ...
2022-03-11T08:39:20.6898911Z INFO : System Property Check: NotSecServer - PASSED
2022-03-11T08:39:20.7510551Z INFO : Running System Property Check: NotSum ...
2022-03-11T08:39:20.7510551Z INFO : System Property Check: NotSum - PASSED
2022-03-11T08:39:20.8129779Z INFO : Running System Property Check: NotBlockedByTamperProtection ...
2022-03-11T08:39:20.8129779Z INFO : Not tamper protected
2022-03-11T08:39:20.8129779Z INFO : System Property Check: NotBlockedByTamperProtection - PASSED
2022-03-11T08:39:20.8761681Z INFO : Running System Property Check: RAMSize ...
2022-03-11T08:39:20.8761681Z INFO : System Property Check: RAMSize - PASSED
2022-03-11T08:39:20.9379149Z INFO : Running System Property Check: SupportedArchitecture ...
2022-03-11T08:39:20.9387741Z INFO : Running on x64
2022-03-11T08:39:20.9387741Z INFO : System Property Check: SupportedArchitecture - PASSED
2022-03-11T08:39:21.0001457Z INFO : Running System Property Check: SupportedOS ...
2022-03-11T08:39:21.0001457Z INFO : Running on workstation.
2022-03-11T08:39:21.0001457Z INFO : System Property Check: SupportedOS - PASSED
2022-03-11T08:39:21.0632325Z INFO : Running System Property Check: SupportedPatches ...
2022-03-11T08:39:21.0642366Z INFO : System Property Check: SupportedPatches - PASSED
2022-03-11T08:39:21.1234056Z INFO : Running System Property Check: ValidTempDirectory ...
2022-03-11T08:39:21.1234056Z INFO : Temp folder exists.
2022-03-11T08:39:21.1243640Z INFO : System Property Check: ValidTempDirectory - PASSED
2022-03-11T08:39:21.1850439Z INFO : Running System Property Check: ValidLocalInstallSourceDirectory ...
2022-03-11T08:39:21.1850439Z INFO : No local install source folder to validate.
2022-03-11T08:39:21.1850439Z INFO : System Property Check: ValidLocalInstallSourceDirectory - PASSED
2022-03-11T08:39:21.2458765Z INFO : Running System Property Check: ValidServer ...
2022-03-11T08:39:21.2458765Z INFO : System Property Check: ValidServer - PASSED
2022-03-11T08:39:21.3073511Z INFO : Running System Property Check: ValidDeploymentInfo ...
2022-03-11T08:39:21.3082024Z INFO : Current Time: 2022-03-11T08:39:21.307000
2022-03-11T08:39:21.3091990Z INFO : This computer is part of the workgroup: WORKGROUP
2022-03-11T08:39:21.3091990Z INFO : Domain Name: WORKGROUP
2022-03-11T08:39:21.3091990Z INFO : Computer Name: DESKTOP-Q80OECK
2022-03-11T08:39:21.3091990Z INFO : Computer Description is not available. 
2022-03-11T08:39:21.3091990Z INFO : Operating system friendly name: Windows 10 Pro 
2022-03-11T08:39:21.3091990Z INFO : Operating system for status: WIN10
2022-03-11T08:39:21.3101966Z INFO : ProductType: 48
2022-03-11T08:39:21.3351310Z INFO : Session user: \\
2022-03-11T08:39:21.3361390Z INFO : Not sending last logged on user. Session user different from running user: WORKGROUP\\DESKTOP-Q80OECK$
2022-03-11T08:39:21.3361390Z INFO : Fully Qualified Domain Name: DESKTOP-Q80OECK
2022-03-11T08:39:21.3361390Z INFO : Processor architecture: x64
2022-03-11T08:39:21.3361390Z INFO : OS Major Version: 10 and OS Minor Version: 0
2022-03-11T08:39:21.3361390Z INFO : Friendly OS Name: WIN10
2022-03-11T08:39:21.3361390Z INFO : Is server?: 0
2022-03-11T08:39:21.3381223Z INFO : Sending HTTP 'POST' request to: sophos/management/ep/install/deployment-info/3
2022-03-11T08:39:21.3431102Z INFO : Did not discover an URL for a PAC file
2022-03-11T08:39:21.3431102Z INFO : Attempting to connect using proxy '' of type 'Empty Proxy'.
2022-03-11T08:39:21.3441091Z INFO : Set security protocol: 00000800
2022-03-11T08:39:21.3441091Z INFO : Opening connection to mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com
2022-03-11T08:39:21.3441091Z INFO : Sending request for connection confirmation through potential proxy
2022-03-11T08:39:21.3451077Z INFO : Request content size: 0
2022-03-11T08:39:21.4680654Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
2022-03-11T08:39:21.4700609Z INFO : Subject certificate failed validation against root CA: SophosCA1
2022-03-11T08:39:21.4700609Z INFO : Subject certificate failed validation against root CA: SophosCA2
2022-03-11T08:39:21.4730524Z INFO : Certificate check succeeded
2022-03-11T08:39:21.4730524Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
2022-03-11T08:39:21.4998042Z INFO : Response status code: 200
2022-03-11T08:39:21.5008071Z INFO : Response data size: 168
2022-03-11T08:39:21.5008071Z INFO : trySendRequestThroughPotentialProxy returning response with status code: 200
2022-03-11T08:39:21.5008071Z INFO : Request content size: 1351
2022-03-11T08:39:21.5019098Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
2022-03-11T08:39:21.5029110Z INFO : Subject certificate failed validation against root CA: SophosCA1
2022-03-11T08:39:21.5029110Z INFO : Subject certificate failed validation against root CA: SophosCA2
2022-03-11T08:39:21.5049042Z INFO : Certificate check succeeded
2022-03-11T08:39:21.5059026Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
2022-03-11T08:39:21.5403495Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
2022-03-11T08:39:21.5413525Z INFO : Subject certificate failed validation against root CA: SophosCA1
2022-03-11T08:39:21.5423427Z INFO : Subject certificate failed validation against root CA: SophosCA2
2022-03-11T08:39:21.5449432Z INFO : Certificate check succeeded
2022-03-11T08:39:21.5449432Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
2022-03-11T08:39:21.5449432Z INFO : Response status code: 200
2022-03-11T08:39:21.5459409Z INFO : Response data size: 215
2022-03-11T08:39:21.5459409Z INFO : Parsing message received for deployment token: {"dciFileName":"19f038e8cd76e417cd405de4871e8fa9","registrationToken":"f7bc4e4906397a7c4ff5681d7389f9425a34af443618915dff3a3f6775db766c","products":[{"product":"INTERCEPT_ESSENTIALS","supported":true,"reasons":[]}]}
2022-03-11T08:39:21.5459409Z INFO : Model::token value changed to: f7bc4e4906397a7c4ff5681d7389f9425a34af443618915dff3a3f6775db766c
2022-03-11T08:39:21.5459409Z INFO : Licenses available: INTERCEPT_ESSENTIALS 
2022-03-11T08:39:21.6008748Z INFO : Running System Property Check: InstallationInProgress ...
2022-03-11T08:39:21.6008748Z INFO : System Property Check: InstallationInProgress - PASSED
2022-03-11T08:39:21.6628532Z INFO : Running System Property Check: SafeGuardEncryption ...
2022-03-11T08:39:21.6628532Z INFO : Entered installedProductCode, upgradeCode={BA2F47D3-1C17-40E7-8DE7-1CD733442B6C}
2022-03-11T08:39:21.6638514Z INFO : Product is not installed
2022-03-11T08:39:21.6638514Z INFO : licensesContainFeature(DEVICE_ENCRYPTION): false
2022-03-11T08:39:21.6638514Z INFO : System Property Check: SafeGuardEncryption - PASSED

  • 0 in reply to Naser Masri

    Hello Naser Masri,

    it is 4 files instead of 2 [...] failed [...] or duplicate?
    should be easy to verify whether they are duplicates but I assume failure then success. As you've posted 2 logs but talked about 4 - what are the other two, also SophosCloudInstaller_2022....? Can't say why the log from 2022-03-11 ends at this point, apart from this the difference I see is that the installer then ran in the SYSTEM context whereas the successful install (5 days later)  ran as a user.

    Christian   

  • +1 in reply to QC

    Hello Christian,

    One of those 4 logs file finished with: Another instance of the application is aleadry running.
    The issue is solved, we have removed the SophosCustToken and reset it again.

    Thank you for helping me!

Unfiltered HTML