No Sophos Security products installed - Windows 11

Hello

I am trying to install Sophos Endpoint Client on a VM running Windows 11 (22H2 - 22621.525).
I want to create a gold image.
The installation completes without errors. After that the status says "No Sophos security products installed".
See screenshots. Only the core agent is installed. Sophos Intercept X is missing.

See screenshots and logs.

What is going wrong here?

Greetings Int3g3r

/cfs-file/__key/communityserver-components-multipleuploadfilemanager/9ed7f2d9_2D00_07b9_2D00_46d5_2D00_91a6_2D00_0f0c1003da41-269107-complete/Logs.zip

Parents
  • Thank you for reaching the community forum,

    Does this VM has an existing Sophos endpoint before but got uninstalled? If so? You may need to uninstall this Endpoint first by running the Sophos ZAP tool?

    You can also follow the below steps to force update the endpoint and install the remaining components.

    1. Turn off tamper protection on the affected endpoint.
    2. Log in to the endpoint using an admin account.
    3. In Services, stop Sophos AutoUpdate Service.
    4. Rename the following folders:
      C:\ProgramData\Sophos\AutoUpdate\Cache\decoded
      C:\ProgramData\Sophos\AutoUpdate\data\warehouse

      to:
      C:\ProgramData\Sophos\AutoUpdate\Cache\old-decoded
      C:\ProgramData\Sophos\AutoUpdate\data\old-warehouse
    5. Delete the file SophosUpdateStatus.xml from the below folder:
      C:\ProgramData\Sophos\AutoUpdate\data\status
    6. Start Sophos AutoUpdate Service.
    7. Open Sophos Endpoint Agent.
    8. Go to About and click Update Now.
    9. Click Open Endpoint Self Help Tool.
    10. Click Refresh and check the status of the affected component on the Installed Components page.
    Glenn ArchieSeñas (GlennSen)
    Global Community Support Engineer | Global Community and Digital Customer Support
    Connect, Engage, Earn Rewards - Join the Sophos Community
Reply
  • Thank you for reaching the community forum,

    Does this VM has an existing Sophos endpoint before but got uninstalled? If so? You may need to uninstall this Endpoint first by running the Sophos ZAP tool?

    You can also follow the below steps to force update the endpoint and install the remaining components.

    1. Turn off tamper protection on the affected endpoint.
    2. Log in to the endpoint using an admin account.
    3. In Services, stop Sophos AutoUpdate Service.
    4. Rename the following folders:
      C:\ProgramData\Sophos\AutoUpdate\Cache\decoded
      C:\ProgramData\Sophos\AutoUpdate\data\warehouse

      to:
      C:\ProgramData\Sophos\AutoUpdate\Cache\old-decoded
      C:\ProgramData\Sophos\AutoUpdate\data\old-warehouse
    5. Delete the file SophosUpdateStatus.xml from the below folder:
      C:\ProgramData\Sophos\AutoUpdate\data\status
    6. Start Sophos AutoUpdate Service.
    7. Open Sophos Endpoint Agent.
    8. Go to About and click Update Now.
    9. Click Open Endpoint Self Help Tool.
    10. Click Refresh and check the status of the affected component on the Installed Components page.
    Glenn ArchieSeñas (GlennSen)
    Global Community Support Engineer | Global Community and Digital Customer Support
    Connect, Engage, Earn Rewards - Join the Sophos Community
Children