Windows 11 ARM

Does Sophos (Intercept X) work on the New Arm processors for Windows 11 Surface Laptops?

If so where do we get the Intercept X download from/for Sophos Central?

Thanks.



Edit tags
[edited by: GlennSen at 8:07 AM (GMT -7) on 3 Jul 2024]
Parents
  • Hi  

    Thank you for reaching out to Sophos Community.

    Sophos Intercept X works on both Windows 10 and Windows 11 ARM64 devices.

    To download the installer:

    1. Sign in to Sophos Central.
    2. Go to Devices > Installers.
    3. Under Endpoint Protection, click Download Complete Windows Installer

    For more information please refer to the article: Sophos Central Endpoint and Server: Installation methods

    Abhimanyu Rawat
    Sophos Digital Support
    Are you a Sophos Partner? | Product Documentation | @SophosSupport | Sign up for SMS Alerts
    If a post solves your question, please use the "Verify Answer" button.
    The New Home of Sophos Support Videos!  Visit Sophos Techvids
  • Hi Everyone!

    One of our employees needs to install Sophos intercept X on a virtual machine on which Windows 11 is installed
    It currently runs on a Mac and has an ARM64 architecture processor
    Unfortunately, we are not able to install Sophos on this virtual machine.
    Can you please help in locating the Problem??

    2024-08-26T13:04:18.4875863Z INFO : Running C:\\Users\\ADSWIE~1\\AppData\\Local\\Temp\\SophosSetup-570162558\\Setup.exe
    2024-08-26T13:04:18.4905891Z INFO : Stage 1 command-line options:
    2024-08-26T13:04:18.4905891Z INFO : ---
    2024-08-26T13:04:18.4915859Z INFO : Quiet mode on: 0
    2024-08-26T13:04:18.4915859Z INFO : Bypass ownership check: 0
    2024-08-26T13:04:18.4915859Z INFO : Bypass ACS check: 0
    2024-08-26T13:04:18.4915859Z INFO : Automatic Proxy detection disabled: 0
    2024-08-26T13:04:18.4915859Z INFO : No feedback mode on: 0
    2024-08-26T13:04:18.4915859Z INFO : Dump feedback enabled: 0
    2024-08-26T13:04:18.4925872Z INFO : Bypass competitor removal: 0
    2024-08-26T13:04:18.4925872Z INFO : Using CRT catalog file path: --
    2024-08-26T13:04:18.4925872Z INFO : Re-register installed endpoint with Central: 0
    2024-08-26T13:04:18.4935863Z INFO : Log messages between endpoint and Central: 0
    2024-08-26T13:04:18.4935863Z INFO : Log command-line passed to executables: 0
    2024-08-26T13:04:18.4935863Z INFO : Using custom server that hosts the installer stage2 filename: --
    2024-08-26T13:04:18.4935863Z INFO : Using cloud group: --
    2024-08-26T13:04:18.4935863Z INFO : Overriding computer name: --
    2024-08-26T13:04:18.4935863Z INFO : Overriding computer description: --
    2024-08-26T13:04:18.4946829Z INFO : Overriding domain name: --
    2024-08-26T13:04:18.4946829Z INFO : Language will be set to: --
    2024-08-26T13:04:18.4946829Z INFO : Using message relays: --
    2024-08-26T13:04:18.4946829Z INFO : Proxy address: --
    2024-08-26T13:04:18.4946829Z INFO : Proxy user name: --
    2024-08-26T13:04:18.4946829Z INFO : Using custom customer token: --
    2024-08-26T13:04:18.4946829Z INFO : Using specified products: --
    2024-08-26T13:04:18.4946829Z INFO : Using certificates from the program data folder: 0
    2024-08-26T13:04:18.4956148Z INFO : Setting non-persistent image: 0
    2024-08-26T13:04:18.4956148Z INFO : Setting gold image: 0
    2024-08-26T13:04:18.4956148Z INFO : MCS registration timeout for golden image: --
    2024-08-26T13:04:18.4956148Z INFO : Setting notification mode: 0
    2024-08-26T13:04:18.4966051Z INFO : Using custom customer ID: --
    2024-08-26T13:04:18.4966051Z INFO : Using specified user ID: --
    2024-08-26T13:04:18.4966051Z INFO : Using local install source: --
    2024-08-26T13:04:18.4966051Z INFO : ---
    2024-08-26T13:04:18.4995843Z INFO : Detected architecture: 3
    2024-08-26T13:04:18.4995843Z INFO : Using native program files for stage 2
    2024-08-26T13:04:18.5005880Z INFO : Target path: C:\\Program Files\\Sophos\\CloudInstaller
    2024-08-26T13:04:18.6096011Z INFO : About to delete: C:\\Program Files\\Sophos\\CloudInstaller
    2024-08-26T13:04:18.6096011Z INFO : Folder not present, nothing to delete
    2024-08-26T13:04:18.6106019Z INFO : Running on ARM64, requesting ARM64 Stage2
    2024-08-26T13:04:18.6135917Z INFO : Sending HTTP 'POST' request to: api/download/stage2-details/8c015571-1435-4ee9-921a-52580d1f29e7
    2024-08-26T13:04:18.6295864Z INFO : Did not discover an URL for a PAC file
    2024-08-26T13:04:18.6315932Z INFO : Attempting to connect using proxy '' of type 'Empty Proxy'.
    2024-08-26T13:04:18.6335930Z INFO : Set security protocol: 00000800
    2024-08-26T13:04:18.6335930Z INFO : Opening connection to api-cloudstation-eu-central-1.prod.hydra.sophos.com
    2024-08-26T13:04:18.6355854Z INFO : Request content size: 64
    2024-08-26T13:04:18.7315888Z INFO : Sending request
    2024-08-26T13:04:18.7325903Z INFO : Request sent
    2024-08-26T13:04:18.7715866Z INFO : Sending request
    2024-08-26T13:04:18.7715866Z INFO : Request sent
    2024-08-26T13:04:18.7736159Z INFO : Response status code: 200
    2024-08-26T13:04:18.7736159Z INFO : Response data size: 313
    2024-08-26T13:04:18.7746164Z INFO : trySendRequestThroughPotentialProxy returning response with status code: 200
    2024-08-26T13:04:18.7775860Z INFO : Parsing message received for Stage 2 filename: '{"downloads_server":"downloads.sophos.com","telemetry_server":"t1.sophosupd.com","diagnostics_server":"installer1.sophosupd.com","stage2_filename":"stage2-arm64-1.20.627.0-99c3b38508bb360b5992d7a3bb475252f2f3838079f3ebd971cb356a34d4c52f.tar.gz","mcs_server":"mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com"}'
    2024-08-26T13:04:18.7815884Z INFO : Sending HTTP 'GET' request to: full/central/windows/business/installer/stage2-arm64-1.20.627.0-99c3b38508bb360b5992d7a3bb475252f2f3838079f3ebd971cb356a34d4c52f.tar.gz
    2024-08-26T13:04:18.7835957Z INFO : Did not discover an URL for a PAC file
    2024-08-26T13:04:18.7835957Z INFO : Attempting to connect using proxy '' of type 'Empty Proxy'.
    2024-08-26T13:04:18.7855995Z INFO : Set security protocol: 00000800
    2024-08-26T13:04:18.7855995Z INFO : Opening connection to downloads.sophos.com
    2024-08-26T13:04:18.7855995Z INFO : Request content size: 0
    2024-08-26T13:04:18.8735908Z INFO : Sending request
    2024-08-26T13:04:18.8747205Z INFO : Request sent
    2024-08-26T13:04:19.7790626Z INFO : Response status code: 200
    2024-08-26T13:04:19.7799573Z INFO : Response data size: 2771743
    2024-08-26T13:04:19.7799573Z INFO : trySendRequestThroughPotentialProxy returning response with status code: 200
    2024-08-26T13:04:19.7849608Z INFO : Extracting files:
    2024-08-26T13:04:19.7859607Z INFO : integrity.dat
    2024-08-26T13:04:19.7889556Z INFO : manifest.dat
    2024-08-26T13:04:19.7949562Z INFO : SDDS3.dll
    2024-08-26T13:04:19.8359563Z INFO : SophosACSenabledTest.exe
    2024-08-26T13:04:19.8509705Z INFO : SophosSetup_Stage2.exe
    2024-08-26T13:04:19.9171083Z INFO : su-setup64.exe
    2024-08-26T13:04:19.9421108Z INFO : Management Certs/sophosca1.crl
    2024-08-26T13:04:19.9441117Z INFO : Management Certs/sophosca1.crt
    2024-08-26T13:04:19.9450361Z INFO : Management Certs/sophosca2.crl
    2024-08-26T13:04:19.9503595Z INFO : Management Certs/sophosca2.crt
    2024-08-26T13:04:19.9523608Z INFO : Management Certs/sophosca3.crl
    2024-08-26T13:04:19.9535340Z INFO : Management Certs/sophosca3.crt
    2024-08-26T13:04:19.9591220Z INFO : Management Certs/sophosca4.crl
    2024-08-26T13:04:19.9602752Z INFO : Management Certs/sophosca4.crt
    2024-08-26T13:04:19.9623306Z INFO : ManifestCerts/rootca384.crl
    2024-08-26T13:04:19.9681379Z INFO : ManifestCerts/rootca384.crt
    2024-08-26T13:04:20.0566852Z INFO : Running setup.
    2024-08-26T13:04:20.1563080Z INFO : Stage 2 command-line options:
    2024-08-26T13:04:20.1563080Z INFO : ---
    2024-08-26T13:04:20.1563080Z INFO : Parent PID: 7752
    2024-08-26T13:04:20.1573052Z INFO : MCS server: mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com
    2024-08-26T13:04:20.1573052Z INFO : Telemetry server: t1.sophosupd.com
    2024-08-26T13:04:20.1573052Z INFO : Diagnostics server: installer1.sophosupd.com
    2024-08-26T13:04:20.1573052Z INFO : Message relays: --
    2024-08-26T13:04:20.1573052Z INFO : Suppressing feedback: 0
    2024-08-26T13:04:20.1573052Z INFO : Dump feedback to disk: 0
    2024-08-26T13:04:20.1573052Z INFO : Setting non-persistent image: 0
    2024-08-26T13:04:20.1573052Z INFO : Setting gold image: 0
    2024-08-26T13:04:20.1573052Z INFO : MCS registration timeout for golden image: --
    2024-08-26T13:04:20.1573052Z INFO : Setting notification mode: 0
    2024-08-26T13:04:20.1583051Z INFO : Register only: 0
    2024-08-26T13:04:20.1583051Z INFO : Trail logging: 0
    2024-08-26T13:04:20.1583051Z INFO : Command-line logging: 0
    2024-08-26T13:04:20.1583051Z INFO : Bypassing competitor removal: 0
    2024-08-26T13:04:20.1583051Z INFO : CRT catalog: --
    2024-08-26T13:04:20.1583051Z INFO : Language: --
    2024-08-26T13:04:20.1583051Z INFO : Log files: C:\\ProgramData\\Sophos\\CloudInstaller\\Logs\\SophosCloudInstaller_20240826_130418.log
    2024-08-26T13:04:20.1583051Z INFO : Group: --
    2024-08-26T13:04:20.1583051Z INFO : Quiet: 0
    2024-08-26T13:04:20.1583051Z INFO : Bypass ownership check: 0
    2024-08-26T13:04:20.1583051Z INFO : Bypass ACS check: 0
    2024-08-26T13:04:20.1593336Z INFO : Virtual appliance: 0
    2024-08-26T13:04:20.1593336Z INFO : Proxy address: --
    2024-08-26T13:04:20.1593336Z INFO : Proxy user: --
    2024-08-26T13:04:20.1593336Z INFO : Overriding computer name: --
    2024-08-26T13:04:20.1593336Z INFO : Overriding computer description: --
    2024-08-26T13:04:20.1593336Z INFO : Overriding domain: --
    2024-08-26T13:04:20.1593336Z INFO : Disable proxy detection: 0
    2024-08-26T13:04:20.1593336Z INFO : Customer Token Specified: 8c015571-1435-4ee9-921a-52580d1f29e7
    2024-08-26T13:04:20.1593336Z INFO : Products: all
    2024-08-26T13:04:20.1593336Z INFO : Pipe write handle: 2028
    2024-08-26T13:04:20.1593336Z INFO : MCS Certificates Folder: 0
    2024-08-26T13:04:20.1593336Z INFO : MCS Customer Id: 381f7e60-63b2-6446-a913-f891789ece82
    2024-08-26T13:04:20.1593336Z INFO : User Id: --
    2024-08-26T13:04:20.1603266Z INFO : Local install source: --
    2024-08-26T13:04:20.1603266Z INFO : Partner Id: --
    2024-08-26T13:04:20.1603266Z INFO : Customer Estate Id: --
    2024-08-26T13:04:20.1603266Z INFO : ---
    2024-08-26T13:04:20.1623054Z INFO : User name: AdSwietoslawski
    2024-08-26T13:04:20.1633044Z INFO : NameDnsDomain: SOFTSYSTEM.DE\\AdSwietoslawski
    2024-08-26T13:04:20.1633044Z INFO : dnsDomain: SOFTSYSTEM.DE
    2024-08-26T13:04:20.2053860Z INFO : lpProfilePath: 
    2024-08-26T13:04:20.2084264Z INFO : User profile loaded
    2024-08-26T13:04:20.2084264Z INFO : Net API buffer freed
    2024-08-26T13:04:20.2084264Z INFO : Model::messageRelays value changed to be size: 0
    2024-08-26T13:04:20.2084264Z INFO : Model::group value changed to: 
    2024-08-26T13:04:20.2084264Z INFO : Model::parentPid value changed to: 7752
    2024-08-26T13:04:20.2094324Z INFO : Model::products changed to: all
    2024-08-26T13:04:20.2094324Z INFO : Model::customer token value changed to: 8c015571-1435-4ee9-921a-52580d1f29e7
    2024-08-26T13:04:20.2094324Z INFO : MCS Crts: C:\\Program Files\\Sophos\\CloudInstaller\\Management Certs\\sophosca1.crt,C:\\Program Files\\Sophos\\CloudInstaller\\Management Certs\\sophosca2.crt,C:\\Program Files\\Sophos\\CloudInstaller\\Management Certs\\sophosca3.crt,C:\\Program Files\\Sophos\\CloudInstaller\\Management Certs\\sophosca4.crt
    2024-08-26T13:04:20.2094324Z INFO : MCS CRLs: C:\\Program Files\\Sophos\\CloudInstaller\\Management Certs\\sophosca1.crl,C:\\Program Files\\Sophos\\CloudInstaller\\Management Certs\\sophosca2.crl,C:\\Program Files\\Sophos\\CloudInstaller\\Management Certs\\sophosca3.crl,C:\\Program Files\\Sophos\\CloudInstaller\\Management Certs\\sophosca4.crl
    2024-08-26T13:04:20.2094324Z INFO : Model:: MCS customer id value changed to: 381f7e60-63b2-6446-a913-f891789ece82
    2024-08-26T13:04:20.2094324Z INFO : Sophos Endpoint Defense is not installed
    2024-08-26T13:04:20.2094324Z INFO : Not tamper-protected by SED
    2024-08-26T13:04:20.2104325Z INFO : detectedMsiInstalledMcs.installed: 0
    2024-08-26T13:04:20.2104325Z INFO : Stage 1 version:1.20.627.0
    2024-08-26T13:04:20.2104325Z INFO : Stage 2 version:1.20.627.0
    2024-08-26T13:04:20.2104325Z INFO : OS version: 10.0.22631.
    2024-08-26T13:04:20.2104325Z INFO : Service pack: 0.0.
    2024-08-26T13:04:20.2115471Z INFO : System Language: 1031.
    2024-08-26T13:04:20.2115471Z INFO : User Language: 1031.
    2024-08-26T13:04:20.2115471Z INFO : 64 bit: no.
    2024-08-26T13:04:20.2144267Z INFO : Beginning command definition.
    2024-08-26T13:04:20.2144267Z INFO : Adding command to remove Sophos 'Image File Execution Options' keys.
    2024-08-26T13:04:20.2144267Z INFO : Adding command to wait for SAU update to complete.
    2024-08-26T13:04:20.2144267Z INFO : Adding competitor detection command.
    2024-08-26T13:04:20.2144267Z INFO : Adding command to register with Sophos cloud.
    2024-08-26T13:04:20.2154352Z INFO : Adding command to download product suite.
    2024-08-26T13:04:20.2174274Z INFO : Cache folder: C:\\ProgramData\\Sophos\\AutoUpdate\\cache
    2024-08-26T13:04:20.2174274Z INFO : No setup DLL found for component sau
    2024-08-26T13:04:20.2174274Z INFO : Adding command to uninstall Sophos AutoUpdate MSI
    2024-08-26T13:04:20.2174274Z INFO : Adding command to remove existing installation of Sophos AutoUpdate
    2024-08-26T13:04:20.2174274Z INFO : Adding command to allow tamper protected reinstalls.
    2024-08-26T13:04:20.2174274Z INFO : Adding commands to uninstall remaining existing products.
    2024-08-26T13:04:20.2174274Z INFO : Adding command to remove existing installation of Sophos System Protection
    2024-08-26T13:04:20.2174274Z INFO : Adding command to remove existing installation of Sophos Heartbeat
    2024-08-26T13:04:20.2174274Z INFO : Adding command to remove existing installation of Sophos Network Access Control
    2024-08-26T13:04:20.2174274Z INFO : Adding command to remove existing installation of Sophos Client Firewall
    2024-08-26T13:04:20.2184395Z INFO : Adding command to remove existing installation of Sophos Patch
    2024-08-26T13:04:20.2184395Z INFO : Adding command to remove existing installation of Sophos Clean
    2024-08-26T13:04:20.2184395Z INFO : Adding command to uninstall orphaned products.
    2024-08-26T13:04:20.2184395Z INFO : Adding command to prepare for installation.
    2024-08-26T13:04:20.2184395Z INFO : Adding command to install Sophos agent.
    2024-08-26T13:04:20.2184395Z INFO : Command definition complete.
    2024-08-26T13:04:20.2184395Z INFO : FindMainWindow: pid=7752
    2024-08-26T13:04:20.2194579Z INFO : Window is main control window of process
    2024-08-26T13:04:20.2194579Z INFO : ::EnumWindows stopped early; window found
    2024-08-26T13:04:20.2194579Z INFO : _bestHandle=0000000000050726
    2024-08-26T13:04:20.4484802Z INFO : Running System Property Check: VerifyTrust ...
    2024-08-26T13:04:20.4704780Z INFO : System Property Check: VerifyTrust - PASSED
    2024-08-26T13:04:20.5281542Z INFO : Running System Property Check: RequiredPrivilegesHeld ...
    2024-08-26T13:04:20.5292268Z INFO : All required privileges could be enabled
    2024-08-26T13:04:20.5292268Z INFO : System Property Check: RequiredPrivilegesHeld - PASSED
    2024-08-26T13:04:20.5933067Z INFO : Running System Property Check: TrustedHmpaFolder ...
    2024-08-26T13:04:20.5933067Z INFO : HMPA folder is trusted
    2024-08-26T13:04:20.5933067Z INFO : System Property Check: TrustedHmpaFolder - PASSED
    2024-08-26T13:04:20.6540038Z INFO : Running System Property Check: HostnameLength ...
    2024-08-26T13:04:20.6550036Z INFO : Initialized Winsock subsystem
    2024-08-26T13:04:20.6580046Z INFO : Valid hostname length
    2024-08-26T13:04:20.6590059Z INFO : System Property Check: HostnameLength - PASSED
    2024-08-26T13:04:20.7144049Z INFO : Running System Property Check: GroupNameLength ...
    2024-08-26T13:04:20.7144049Z INFO : System Property Check: GroupNameLength - PASSED
    2024-08-26T13:04:20.7774855Z INFO : Running System Property Check: JunctionPointsCheck ...
    2024-08-26T13:04:20.7814771Z INFO : Scanned 79 Sophos paths for junction points
    2024-08-26T13:04:20.7814771Z INFO : System Property Check: JunctionPointsCheck - PASSED
    2024-08-26T13:04:20.8400684Z INFO : Running System Property Check: PendingReboots ...
    2024-08-26T13:04:20.8400684Z INFO : Found pending file rename operations in the registry
    2024-08-26T13:04:20.8400684Z WARNING : System Property Check: PendingReboots recommended - FAILED
    2024-08-26T13:04:20.9017253Z INFO : Running System Property Check: PrimaryDriveSpace ...
    2024-08-26T13:04:20.9027753Z INFO : Enough space: 23226 Mb
    2024-08-26T13:04:20.9027753Z INFO : System Property Check: PrimaryDriveSpace - PASSED
    2024-08-26T13:04:20.9640134Z INFO : Running System Property Check: MsXml ...
    2024-08-26T13:04:20.9700171Z INFO : System Property Check: MsXml - PASSED
    2024-08-26T13:04:21.0289517Z INFO : Running System Property Check: NotFirewall ...
    2024-08-26T13:04:21.0289517Z INFO : System Property Check: NotFirewall - PASSED
    2024-08-26T13:04:21.0929304Z INFO : Running System Property Check: NotHitmanProAlertIncompatible ...
    2024-08-26T13:04:21.0929304Z INFO : No HitmanPro.Alert Installed
    2024-08-26T13:04:21.0929304Z INFO : System Property Check: NotHitmanProAlertIncompatible - PASSED
    2024-08-26T13:04:21.1541955Z INFO : Running System Property Check: NotInvincea ...
    2024-08-26T13:04:21.1541955Z INFO : System Property Check: NotInvincea - PASSED
    2024-08-26T13:04:21.2179604Z INFO : Running System Property Check: NotMessageRelay ...
    2024-08-26T13:04:21.2179604Z INFO : RMS is not installed on the endpoint
    2024-08-26T13:04:21.2179604Z INFO : System Property Check: NotMessageRelay - PASSED
    2024-08-26T13:04:21.2794062Z INFO : Running System Property Check: NotNac ...
    2024-08-26T13:04:21.2794062Z INFO : System Property Check: NotNac - PASSED
    2024-08-26T13:04:21.3444411Z INFO : Running System Property Check: NotPatch ...
    2024-08-26T13:04:21.3454277Z INFO : System Property Check: NotPatch - PASSED
    2024-08-26T13:04:21.4061280Z INFO : Running System Property Check: NotPureMessageDomino ...
    2024-08-26T13:04:21.4061280Z INFO : System Property Check: NotPureMessageDomino - PASSED
    2024-08-26T13:04:21.4691036Z INFO : Running System Property Check: NotPureMessageExchangeWithAntiSpam ...
    2024-08-26T13:04:21.4691036Z INFO : System Property Check: NotPureMessageExchangeWithAntiSpam - PASSED
    2024-08-26T13:04:21.5330550Z INFO : Running System Property Check: NotSav ...
    2024-08-26T13:04:21.5330550Z INFO : System Property Check: NotSav - PASSED
    2024-08-26T13:04:21.5944979Z INFO : Running System Property Check: NotSharePoint ...
    2024-08-26T13:04:21.5944979Z INFO : System Property Check: NotSharePoint - PASSED
    2024-08-26T13:04:21.6590950Z INFO : Running System Property Check: NotSecServer ...
    2024-08-26T13:04:21.6600125Z INFO : System Property Check: NotSecServer - PASSED
    2024-08-26T13:04:21.7214195Z INFO : Running System Property Check: NotSum ...
    2024-08-26T13:04:21.7214195Z INFO : System Property Check: NotSum - PASSED
    2024-08-26T13:04:21.7840131Z INFO : Running System Property Check: NotBlockedByTamperProtection ...
    2024-08-26T13:04:21.7840131Z INFO : Not tamper protected
    2024-08-26T13:04:21.7840131Z INFO : System Property Check: NotBlockedByTamperProtection - PASSED
    2024-08-26T13:04:21.8473170Z INFO : Running System Property Check: RAMSize ...
    2024-08-26T13:04:21.8473170Z INFO : System Property Check: RAMSize - PASSED
    2024-08-26T13:04:21.9095927Z INFO : Running System Property Check: CpuCoreCount ...
    2024-08-26T13:04:21.9095927Z INFO : Logical processor core count: 12
    2024-08-26T13:04:21.9095927Z INFO : System Property Check: CpuCoreCount - PASSED
    2024-08-26T13:04:21.9729525Z INFO : Running System Property Check: SupportedArchitecture ...
    2024-08-26T13:04:21.9729525Z INFO : Running on ARM64
    2024-08-26T13:04:21.9729525Z INFO : System Property Check: SupportedArchitecture - PASSED
    2024-08-26T13:04:22.0341126Z INFO : Running System Property Check: SupportedOS ...
    2024-08-26T13:04:22.0341126Z INFO : Running on ARM64 workstation.
    2024-08-26T13:04:22.0341126Z INFO : System Property Check: SupportedOS - PASSED
    2024-08-26T13:04:22.0975546Z INFO : Running System Property Check: SupportedPatches ...
    2024-08-26T13:04:22.0975546Z INFO : System Property Check: SupportedPatches - PASSED
    2024-08-26T13:04:22.1590403Z INFO : Running System Property Check: AzureCodeSigning ...
    2024-08-26T13:04:22.1990471Z INFO : ACS supported
    2024-08-26T13:04:22.1990471Z INFO : System Property Check: AzureCodeSigning - PASSED
    2024-08-26T13:04:22.2530929Z INFO : Running System Property Check: DotNetFramework ...
    2024-08-26T13:04:22.2530929Z INFO : Supported .NET version is present
    2024-08-26T13:04:22.2530929Z INFO : System Property Check: DotNetFramework - PASSED
    2024-08-26T13:04:22.3152992Z INFO : Running System Property Check: ValidTempDirectory ...
    2024-08-26T13:04:22.3152992Z INFO : Temp folder exists.
    2024-08-26T13:04:22.3152992Z INFO : System Property Check: ValidTempDirectory - PASSED
    2024-08-26T13:04:22.3762192Z INFO : Running System Property Check: ValidLocalInstallSourceDirectory ...
    2024-08-26T13:04:22.3762192Z INFO : No local install source folder to validate.
    2024-08-26T13:04:22.3762192Z INFO : System Property Check: ValidLocalInstallSourceDirectory - PASSED
    2024-08-26T13:04:22.4391152Z INFO : Running System Property Check: ValidServer ...
    2024-08-26T13:04:22.4391152Z INFO : System Property Check: ValidServer - PASSED
    2024-08-26T13:04:22.5027727Z INFO : Running System Property Check: ValidDeploymentInfo ...
    2024-08-26T13:04:22.5027727Z INFO : Current Time: 2024-08-26T13:04:22.502000
    2024-08-26T13:04:22.5048308Z INFO : This computer is part of the domain SOFTSYSTEM
    2024-08-26T13:04:22.5048308Z INFO : Domain Name: SOFTSYSTEM
    2024-08-26T13:04:22.5048308Z INFO : Computer Name: NB-E02-WIN11
    2024-08-26T13:04:22.5048308Z INFO : Computer Description is not available. 
    2024-08-26T13:04:22.5048308Z INFO : Operating system friendly name: Windows 11 Pro 
    2024-08-26T13:04:22.5048308Z INFO : Operating system for status: WIN11
    2024-08-26T13:04:22.5048308Z INFO : ProductType: 48
    2024-08-26T13:04:22.5098237Z INFO : Session user: SOFTSYSTEM\\AdSwietoslawski
    2024-08-26T13:04:22.5098237Z INFO : Last logged on user: SOFTSYSTEM\\AdSwietoslawski
    2024-08-26T13:04:22.5098237Z INFO : User principal name: AdSwietoslawski@SoftSystem.de
    2024-08-26T13:04:22.5108232Z INFO : Fully Qualified Domain Name: NB-E02-WIN11.SoftSystem.de
    2024-08-26T13:04:22.5108232Z INFO : Processor architecture: arm64
    2024-08-26T13:04:22.5108232Z INFO : OS Major Version: 11 and OS Minor Version: 0
    2024-08-26T13:04:22.5108232Z INFO : Friendly OS Name: WIN11
    2024-08-26T13:04:22.5108232Z INFO : Is server?: 0
    2024-08-26T13:04:22.5118285Z INFO : Sending HTTP 'POST' request to: sophos/management/ep/install/deployment-info/3
    2024-08-26T13:04:22.5138278Z INFO : Did not discover an URL for a PAC file
    2024-08-26T13:04:22.5148235Z INFO : Attempting to connect using proxy '' of type 'Empty Proxy'.
    2024-08-26T13:04:22.5148235Z INFO : Set security protocol: 00000800
    2024-08-26T13:04:22.5148235Z INFO : Opening connection to mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com
    2024-08-26T13:04:22.5148235Z INFO : Sending request for connection confirmation through potential proxy
    2024-08-26T13:04:22.5148235Z INFO : Request content size: 0
    2024-08-26T13:04:22.6006204Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
    2024-08-26T13:04:22.6016187Z INFO : Subject certificate failed validation against root CA: SophosCA1
    2024-08-26T13:04:22.6026199Z INFO : Subject certificate failed validation against root CA: SophosCA2
    2024-08-26T13:04:22.6026199Z INFO : Certificate check succeeded
    2024-08-26T13:04:22.6036181Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
    2024-08-26T13:04:22.6143980Z INFO : Response status code: 200
    2024-08-26T13:04:22.6153922Z INFO : Response data size: 168
    2024-08-26T13:04:22.6153922Z INFO : trySendRequestThroughPotentialProxy returning response with status code: 200
    2024-08-26T13:04:22.6153922Z INFO : Request content size: 1619
    2024-08-26T13:04:22.6153922Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
    2024-08-26T13:04:22.6163927Z INFO : Subject certificate failed validation against root CA: SophosCA1
    2024-08-26T13:04:22.6163927Z INFO : Subject certificate failed validation against root CA: SophosCA2
    2024-08-26T13:04:22.6173906Z INFO : Certificate check succeeded
    2024-08-26T13:04:22.6173906Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
    2024-08-26T13:04:22.6776525Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
    2024-08-26T13:04:22.6786819Z INFO : Subject certificate failed validation against root CA: SophosCA1
    2024-08-26T13:04:22.6786819Z INFO : Subject certificate failed validation against root CA: SophosCA2
    2024-08-26T13:04:22.6797256Z INFO : Certificate check succeeded
    2024-08-26T13:04:22.6797256Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
    2024-08-26T13:04:22.6806893Z INFO : Response status code: 200
    2024-08-26T13:04:22.6806893Z INFO : Response data size: 279
    2024-08-26T13:04:22.6806893Z INFO : Parsing message received for deployment token: {"dciFileName":"41aea06e7cf0d70e17fc260874fb911c","products":[{"product":"DEVICE_ENCRYPTION","supported":true,"reasons":[]},{"product":"INTERCEPT_ADVANCED_MDR","supported":true,"reasons":[]}],"registrationToken":"1b945a0248788f15d68b15a6ca350f9cf2ce27298ac3ac66149c629c0d15aac0"}
    2024-08-26T13:04:22.6806893Z INFO : Model::token value changed to: 1b945a0248788f15d68b15a6ca350f9cf2ce27298ac3ac66149c629c0d15aac0
    2024-08-26T13:04:22.6806893Z INFO : Licenses available: DEVICE_ENCRYPTION INTERCEPT_ADVANCED_MDR 
    2024-08-26T13:04:22.8637592Z INFO : Running System Property Check: InstallationInProgress ...
    2024-08-26T13:04:22.8637592Z INFO : System Property Check: InstallationInProgress - PASSED
    2024-08-26T13:04:22.9286728Z INFO : Running System Property Check: SafeGuardEncryption ...
    2024-08-26T13:04:22.9286728Z INFO : Entered installedProductCode, upgradeCode={BA2F47D3-1C17-40E7-8DE7-1CD733442B6C}
    2024-08-26T13:04:22.9286728Z INFO : Product is not installed
    2024-08-26T13:04:22.9286728Z INFO : licensesContainFeature(DEVICE_ENCRYPTION): true
    2024-08-26T13:04:22.9286728Z INFO : System Property Check: SafeGuardEncryption - PASSED
    2024-08-26T13:04:35.7990159Z INFO : Starting installation process.
    2024-08-26T13:04:35.8000162Z INFO : About to execute command: CleanSophosIfeoKeysCommand
    2024-08-26T13:04:35.8040178Z INFO : Command 'CleanSophosIfeoKeysCommand' completed with success with reboot code '0' and error message ''.
    2024-08-26T13:04:35.8040178Z INFO : About to execute command: WaitForSauUpdateCommand
    2024-08-26T13:04:35.8040178Z INFO : Waiting for operation to succeed within 900000ms.
    2024-08-26T13:04:35.8040178Z INFO : AutoUpdate folder: C:\\Program Files\\Sophos\\AutoUpdate
    2024-08-26T13:04:35.8050116Z INFO : Cache folder: C:\\ProgramData\\Sophos\\AutoUpdate\\cache
    2024-08-26T13:04:35.8050116Z INFO : Cache folder: C:\\ProgramData\\Sophos\\AutoUpdate\\cache
    2024-08-26T13:04:35.8050116Z INFO : SAU not updating - continuing with installation
    2024-08-26T13:04:35.8050116Z INFO : Data folder: C:\\ProgramData\\Sophos\\AutoUpdate\\data
    2024-08-26T13:04:35.8050116Z INFO : Command 'WaitForSauUpdateCommand' completed with success with reboot code '0' and error message ''.
    2024-08-26T13:04:35.8050116Z INFO : About to execute command: CompetitorDetector
    2024-08-26T13:04:35.8110143Z INFO : Command 'CompetitorDetector' completed with success with reboot code '0' and error message ''.
    2024-08-26T13:04:35.8110143Z INFO : About to execute command: Register
    2024-08-26T13:04:35.8110143Z INFO : Ensuring any MCS client service is stopped to prevent race for policy retrieval
    2024-08-26T13:04:35.8120141Z INFO : Sending HTTP 'POST' request to: sophos/management/ep/install/register
    2024-08-26T13:04:35.8130261Z INFO : Did not discover an URL for a PAC file
    2024-08-26T13:04:35.8130261Z INFO : Attempting to connect using proxy '' of type 'Empty Proxy'.
    2024-08-26T13:04:35.8140157Z INFO : Set security protocol: 00000800
    2024-08-26T13:04:35.8140157Z INFO : Opening connection to mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com
    2024-08-26T13:04:35.8140157Z INFO : Sending request for connection confirmation through potential proxy
    2024-08-26T13:04:35.8150145Z INFO : Request content size: 0
    2024-08-26T13:04:35.8150145Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
    2024-08-26T13:04:35.8160118Z INFO : Subject certificate failed validation against root CA: SophosCA1
    2024-08-26T13:04:35.8160118Z INFO : Subject certificate failed validation against root CA: SophosCA2
    2024-08-26T13:04:35.8170491Z INFO : Certificate check succeeded
    2024-08-26T13:04:35.8180398Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
    2024-08-26T13:04:35.8288797Z INFO : Response status code: 200
    2024-08-26T13:04:35.8288797Z INFO : Response data size: 168
    2024-08-26T13:04:35.8288797Z INFO : trySendRequestThroughPotentialProxy returning response with status code: 200
    2024-08-26T13:04:35.8288797Z INFO : Request content size: 1619
    2024-08-26T13:04:35.8299693Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
    2024-08-26T13:04:35.8299693Z INFO : Subject certificate failed validation against root CA: SophosCA1
    2024-08-26T13:04:35.8309447Z INFO : Subject certificate failed validation against root CA: SophosCA2
    2024-08-26T13:04:35.8309447Z INFO : Certificate check succeeded
    2024-08-26T13:04:35.8319573Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
    2024-08-26T13:04:36.2549208Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
    2024-08-26T13:04:36.2559877Z INFO : Subject certificate failed validation against root CA: SophosCA1
    2024-08-26T13:04:36.2569853Z INFO : Subject certificate failed validation against root CA: SophosCA2
    2024-08-26T13:04:36.2579838Z INFO : Certificate check succeeded
    2024-08-26T13:04:36.2579838Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
    2024-08-26T13:04:36.2579838Z INFO : Response status code: 200
    2024-08-26T13:04:36.2579838Z INFO : Response data size: 72
    2024-08-26T13:04:36.2579838Z INFO : Retrieved endpoint id: 30ac8164-83eb-a4aa-781a-cbf9ba4206c2
    2024-08-26T13:04:37.2738890Z INFO : Sending HTTP 'POST' request to: sophos/management/ep/install/authenticate/endpoint/30ac8164-83eb-a4aa-781a-cbf9ba4206c2/role/endpoint
    2024-08-26T13:04:37.2738890Z INFO : Request content size: 0
    2024-08-26T13:04:37.2758893Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
    2024-08-26T13:04:37.2768889Z INFO : Subject certificate failed validation against root CA: SophosCA1
    2024-08-26T13:04:37.2768889Z INFO : Subject certificate failed validation against root CA: SophosCA2
    2024-08-26T13:04:37.2778956Z INFO : Certificate check succeeded
    2024-08-26T13:04:37.2788844Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
    2024-08-26T13:04:37.4187419Z INFO : Response status code: 200
    2024-08-26T13:04:37.4187419Z INFO : Response data size: 1038
    2024-08-26T13:04:37.4187419Z INFO : Retrieved mcs auth: tenant_id=83f1e706-362b-4664-9a31-8f1987e9ec28 device_id=03ca1846-38be-4aaa-87a1-bc9fab24602c
    2024-08-26T13:04:37.4197840Z INFO : MCS Auth token features: f_endpoint_updating
    2024-08-26T13:04:37.4197840Z INFO : MCS Auth token features: f_ep_scheduledquery
    2024-08-26T13:04:37.4197840Z INFO : Sending HTTP 'GET' request to: sophos/management/ep/install/flags/endpoint/30ac8164-83eb-a4aa-781a-cbf9ba4206c2
    2024-08-26T13:04:37.4197840Z INFO : Request content size: 0
    2024-08-26T13:04:37.4208631Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
    2024-08-26T13:04:37.4217851Z INFO : Subject certificate failed validation against root CA: SophosCA1
    2024-08-26T13:04:37.4217851Z INFO : Subject certificate failed validation against root CA: SophosCA2
    2024-08-26T13:04:37.4227851Z INFO : Certificate check succeeded
    2024-08-26T13:04:37.4237956Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
    2024-08-26T13:04:37.5046385Z INFO : Response status code: 200
    2024-08-26T13:04:37.5046385Z INFO : Response data size: 6607
    2024-08-26T13:04:37.5046385Z INFO : Loaded 177 endpoint flags
    2024-08-26T13:04:37.5046385Z INFO : Fetching policy through MCS v1 API
    2024-08-26T13:04:37.5046385Z INFO : Sending HTTP 'PUT' request to: sophos/management/ep/install/statuses/endpoint/30ac8164-83eb-a4aa-781a-cbf9ba4206c2
    2024-08-26T13:04:37.5056346Z INFO : Request content size: 990
    2024-08-26T13:04:37.5056346Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
    2024-08-26T13:04:37.5066374Z INFO : Subject certificate failed validation against root CA: SophosCA1
    2024-08-26T13:04:37.5076386Z INFO : Subject certificate failed validation against root CA: SophosCA2
    2024-08-26T13:04:37.5076386Z INFO : Certificate check succeeded
    2024-08-26T13:04:37.5086413Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
    2024-08-26T13:04:37.6894287Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
    2024-08-26T13:04:37.6904566Z INFO : Subject certificate failed validation against root CA: SophosCA1
    2024-08-26T13:04:37.6914570Z INFO : Subject certificate failed validation against root CA: SophosCA2
    2024-08-26T13:04:37.6924572Z INFO : Certificate check succeeded
    2024-08-26T13:04:37.6924572Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
    2024-08-26T13:04:37.6924572Z INFO : Response status code: 200
    2024-08-26T13:04:37.6924572Z INFO : Response data size: 0
    2024-08-26T13:04:37.6924572Z INFO : Attempt to retrieve policy.
    2024-08-26T13:04:37.6924572Z INFO : Sending HTTP 'GET' request to: sophos/management/ep/install/commands/applications/APPSPROXY;ALC/endpoint/30ac8164-83eb-a4aa-781a-cbf9ba4206c2
    2024-08-26T13:04:37.6934535Z INFO : Request content size: 0
    2024-08-26T13:04:37.6934535Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
    2024-08-26T13:04:37.6944549Z INFO : Subject certificate failed validation against root CA: SophosCA1
    2024-08-26T13:04:37.6944549Z INFO : Subject certificate failed validation against root CA: SophosCA2
    2024-08-26T13:04:37.6954541Z INFO : Certificate check succeeded
    2024-08-26T13:04:37.6964594Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
    2024-08-26T13:04:37.7099944Z INFO : Response status code: 200
    2024-08-26T13:04:37.7099944Z INFO : Response data size: 790
    2024-08-26T13:04:37.7099944Z INFO : Successfully retrieved policy with policyId='c3b010e2dcf0808c02d4fcd8fbd783b295a0bf8beb70e16f1ef3060d63debd7a'.
    2024-08-26T13:04:37.7110231Z INFO : Sending HTTP 'DELETE' request to: sophos/management/ep/install/commands/endpoint/30ac8164-83eb-a4aa-781a-cbf9ba4206c2/43
    2024-08-26T13:04:37.7110231Z INFO : Request content size: 0
    2024-08-26T13:04:37.7110231Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
    2024-08-26T13:04:37.7120364Z INFO : Subject certificate failed validation against root CA: SophosCA1
    2024-08-26T13:04:37.7130497Z INFO : Subject certificate failed validation against root CA: SophosCA2
    2024-08-26T13:04:37.7140206Z INFO : Certificate check succeeded
    2024-08-26T13:04:37.7150228Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
    2024-08-26T13:04:37.7619106Z INFO : Response status code: 200
    2024-08-26T13:04:37.7619106Z INFO : Response data size: 0
    2024-08-26T13:04:37.7629319Z INFO : Sending HTTP 'GET' request to: sophos/management/ep/install/policy/application/ALC/c3b010e2dcf0808c02d4fcd8fbd783b295a0bf8beb70e16f1ef3060d63debd7a
    2024-08-26T13:04:37.7629319Z INFO : Request content size: 0
    2024-08-26T13:04:37.7639614Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
    2024-08-26T13:04:37.7649306Z INFO : Subject certificate failed validation against root CA: SophosCA1
    2024-08-26T13:04:37.7649306Z INFO : Subject certificate failed validation against root CA: SophosCA2
    2024-08-26T13:04:37.7659385Z INFO : Certificate check succeeded
    2024-08-26T13:04:37.7669408Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
    2024-08-26T13:04:37.8429289Z INFO : Response status code: 200
    2024-08-26T13:04:37.8429289Z INFO : Response data size: 3541
    2024-08-26T13:04:37.8429289Z INFO : Subscription id: Base, rigidname: WindowsCloudNextGen, baseversion: 11, tag: RECOMMENDED, fixedversion: 
    2024-08-26T13:04:37.8439425Z INFO : Subscription id: Clean, rigidname: WindowsCloudClean, baseversion: 1, tag: RECOMMENDED, fixedversion: 
    2024-08-26T13:04:37.8439425Z INFO : Subscription id: CloudAV, rigidname: WindowsCloudAV, baseversion: 11, tag: RECOMMENDED, fixedversion: 
    2024-08-26T13:04:37.8439425Z INFO : Subscription id: Encryption, rigidname: WindowsCloudEncryption, baseversion: 1, tag: RECOMMENDED, fixedversion: 
    2024-08-26T13:04:37.8439425Z INFO : Subscription id: HitmanProAlert, rigidname: WindowsCloudHitmanProAlert, baseversion: 1, tag: RECOMMENDED, fixedversion: 
    2024-08-26T13:04:37.8439425Z INFO : Subscription id: MDR, rigidname: WindowsCloudMDR, baseversion: , tag: RECOMMENDED, fixedversion: 
    2024-08-26T13:04:37.8439425Z INFO : Fixed version token: 1fa7e4d2-a338-53fe-8573-6f03afbf8c90, name: FTS 2023.2.1.31-MR3
    2024-08-26T13:04:37.8449506Z INFO : Feature: APPCNTRL
    2024-08-26T13:04:37.8449506Z INFO : Feature: AV
    2024-08-26T13:04:37.8449506Z INFO : Feature: CLEAN
    2024-08-26T13:04:37.8449506Z INFO : Feature: CORE
    2024-08-26T13:04:37.8449506Z INFO : Feature: DLP
    2024-08-26T13:04:37.8459366Z INFO : Feature: DVCCNTRL
    2024-08-26T13:04:37.8459366Z INFO : Feature: EFW
    2024-08-26T13:04:37.8459366Z INFO : Feature: HBT
    2024-08-26T13:04:37.8459366Z INFO : Feature: NTP
    2024-08-26T13:04:37.8459366Z INFO : Feature: SAV
    2024-08-26T13:04:37.8469271Z INFO : Feature: SDU
    2024-08-26T13:04:37.8469271Z INFO : Feature: WEBCNTRL
    2024-08-26T13:04:37.8469271Z INFO : Feature: XPD
    2024-08-26T13:04:37.8469271Z INFO : Server for 'sus': sus.sophosupd.com
    2024-08-26T13:04:37.8469271Z INFO : Server for 'content_server': sdds3.sophosupd.com
    2024-08-26T13:04:37.8469271Z INFO : Server for 'content_server': sdds3.sophosupd.net
    2024-08-26T13:04:37.8469271Z INFO : Server for 'telemetry': t1.sophosupd.com
    2024-08-26T13:04:37.8469271Z INFO : Server for 'feedback': sdu-feedback.sophos.com
    2024-08-26T13:04:37.8479435Z INFO : Server for 'repairkit': sdu-auto-upload.sophosupd.com
    2024-08-26T13:04:37.8479435Z INFO : Restarting MCS Client service if stopped
    2024-08-26T13:04:37.8479435Z INFO : Command 'Register' completed with success with reboot code '0' and error message ''.
    2024-08-26T13:04:37.8479435Z INFO : About to execute command: Download
    2024-08-26T13:04:37.8479435Z INFO : Update Cache Cert Path folder: C:\\ProgramData\\Sophos\\Certificates\\AutoUpdate\\Cache
    2024-08-26T13:04:37.8489311Z INFO : CRT required: adding 'CRT' feature
    2024-08-26T13:04:37.9009231Z INFO : Using SDDS3 delta version: 3
    2024-08-26T13:04:37.9009231Z INFO : SUS service request body: {"schema_version":"1","product":"winep","server":false,"platform_token":"WIN_11_ARM64","platform_release":"2009 22631.4037","os_version":"11.0","subscriptions":[{"id":"WindowsCloudAV","tag":"RECOMMENDED"},{"id":"WindowsCloudClean","tag":"RECOMMENDED"},{"id":"WindowsCloudEncryption","tag":"RECOMMENDED"},{"id":"WindowsCloudHitmanProAlert","tag":"RECOMMENDED"},{"id":"WindowsCloudMDR","tag":"RECOMMENDED"},{"id":"WindowsCloudNextGen","tag":"RECOMMENDED"}],"fixed_version_token":"1fa7e4d2-a338-53fe-8573-6f03afbf8c90"}
    2024-08-26T13:04:37.9009231Z INFO : No manually configured proxy
    2024-08-26T13:04:37.9019238Z INFO : WinHttp default proxy not set
    2024-08-26T13:04:37.9029242Z INFO : WinHttp discovered proxies not found
    2024-08-26T13:04:37.9029242Z INFO : Trying update service url https://sus.sophosupd.com/v3/83f1e706-362b-4664-9a31-8f1987e9ec28/03ca1846-38be-4aaa-87a1-bc9fab24602c with proxy: <direct; no proxy>
    2024-08-26T13:04:38.0542010Z INFO : 200 from https://sus.sophosupd.com/v3/83f1e706-362b-4664-9a31-8f1987e9ec28/03ca1846-38be-4aaa-87a1-bc9fab24602c with proxy: <direct; no proxy> (peer address 54.170.4.213)
    2024-08-26T13:04:38.0551797Z INFO : SUS response body: {"error": "200 OK", "reason": "Presented fixed version token is EOL", "code": "FIXED_VERSION_TOKEN_EOL"}
    2024-08-26T13:04:38.0551797Z INFO : SUS response body size: 104
    2024-08-26T13:04:38.0581733Z INFO : Sophos Update Service response: error='200 OK' reason='Presented fixed version token is EOL' code='FIXED_VERSION_TOKEN_EOL'
    2024-08-26T13:04:38.0581733Z ERROR : Error: Sophos Update Service failed to provide suites
    2024-08-26T13:04:38.0581733Z ERROR : DownloadCommand::onRun() failed with std::exception: SDDS3 sync failed
    2024-08-26T13:04:38.0581733Z INFO : Command 'Download' completed with failure with reboot code '0' and error message 'Software konnte nicht heruntergeladen werden'.
    2024-08-26T13:04:38.0581733Z ERROR : Installation failed.
    2024-08-26T13:04:38.0591702Z INFO : Sending HTTP 'POST' request to: sophos/management/ep/install/events/endpoint/30ac8164-83eb-a4aa-781a-cbf9ba4206c2
    2024-08-26T13:04:38.0601713Z INFO : Did not discover an URL for a PAC file
    2024-08-26T13:04:38.0601713Z INFO : Attempting to connect using proxy '' of type 'Empty Proxy'.
    2024-08-26T13:04:38.0611737Z INFO : Set security protocol: 00000800
    2024-08-26T13:04:38.0611737Z INFO : Opening connection to mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com
    2024-08-26T13:04:38.0611737Z INFO : Sending request for connection confirmation through potential proxy
    2024-08-26T13:04:38.0611737Z INFO : Request content size: 0
    2024-08-26T13:04:38.0621755Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
    2024-08-26T13:04:38.0621755Z INFO : Subject certificate failed validation against root CA: SophosCA1
    2024-08-26T13:04:38.0631712Z INFO : Subject certificate failed validation against root CA: SophosCA2
    2024-08-26T13:04:38.0642391Z INFO : Certificate check succeeded
    2024-08-26T13:04:38.0642391Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
    2024-08-26T13:04:38.0740063Z INFO : Response status code: 200
    2024-08-26T13:04:38.0740063Z INFO : Response data size: 168
    2024-08-26T13:04:38.0740063Z INFO : trySendRequestThroughPotentialProxy returning response with status code: 200
    2024-08-26T13:04:38.0740063Z INFO : Request content size: 973
    2024-08-26T13:04:38.0751150Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
    2024-08-26T13:04:38.0760752Z INFO : Subject certificate failed validation against root CA: SophosCA1
    2024-08-26T13:04:38.0760752Z INFO : Subject certificate failed validation against root CA: SophosCA2
    2024-08-26T13:04:38.0760752Z INFO : Certificate check succeeded
    2024-08-26T13:04:38.0771260Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
    2024-08-26T13:04:38.1318851Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
    2024-08-26T13:04:38.1329129Z INFO : Subject certificate failed validation against root CA: SophosCA1
    2024-08-26T13:04:38.1329129Z INFO : Subject certificate failed validation against root CA: SophosCA2
    2024-08-26T13:04:38.1329129Z INFO : Certificate check succeeded
    2024-08-26T13:04:38.1339310Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
    2024-08-26T13:04:38.1339310Z INFO : Response status code: 200
    2024-08-26T13:04:38.1339310Z INFO : Response data size: 0
    2024-08-26T13:05:54.6808566Z INFO : Data folder: C:\\ProgramData\\Sophos\\AutoUpdate\\data
    2024-08-26T13:05:54.6958521Z INFO : Sending HTTP 'PUT' request to: prod/2024-08-26T13:05:54Z-2024-08-26T13:05:54Z-13966ac3-46f4-57d7-bba6-efbb7735308e.json
    2024-08-26T13:05:54.6998503Z INFO : Did not discover an URL for a PAC file
    2024-08-26T13:05:54.6998503Z INFO : Attempting to connect using proxy '' of type 'Empty Proxy'.
    2024-08-26T13:05:54.7008521Z INFO : Set security protocol: 00000800
    2024-08-26T13:05:54.7008521Z INFO : Opening connection to t1.sophosupd.com
    2024-08-26T13:05:54.7019136Z INFO : Request content size: 4207
    2024-08-26T13:05:54.7946905Z INFO : Sending request
    2024-08-26T13:05:54.7946905Z INFO : Request sent
    2024-08-26T13:05:54.8997225Z INFO : Sending request
    2024-08-26T13:05:54.8997225Z INFO : Request sent
    2024-08-26T13:05:54.8997225Z INFO : Response status code: 200
    2024-08-26T13:05:54.9007812Z INFO : Response data size: 0
    2024-08-26T13:05:54.9007812Z INFO : trySendRequestThroughPotentialProxy returning response with status code: 200
    2024-08-26T13:05:54.9007812Z INFO : Telemetry Response: 
    2024-08-26T13:05:54.9007812Z INFO : Install result: Failed
    2024-08-26T13:05:54.9027777Z INFO : User profile unloaded
    2024-08-26T13:05:54.9117770Z INFO : Cleaning up extracted files
    2024-08-26T13:05:54.9167775Z ERROR : Error downloading/running stage 2: Setup program failed with code: 1
    2024-08-26T13:05:54.9197764Z ERROR : Exception: Setup program failed with code: 1
    

Reply
  • Hi Everyone!

    One of our employees needs to install Sophos intercept X on a virtual machine on which Windows 11 is installed
    It currently runs on a Mac and has an ARM64 architecture processor
    Unfortunately, we are not able to install Sophos on this virtual machine.
    Can you please help in locating the Problem??

    2024-08-26T13:04:18.4875863Z INFO : Running C:\\Users\\ADSWIE~1\\AppData\\Local\\Temp\\SophosSetup-570162558\\Setup.exe
    2024-08-26T13:04:18.4905891Z INFO : Stage 1 command-line options:
    2024-08-26T13:04:18.4905891Z INFO : ---
    2024-08-26T13:04:18.4915859Z INFO : Quiet mode on: 0
    2024-08-26T13:04:18.4915859Z INFO : Bypass ownership check: 0
    2024-08-26T13:04:18.4915859Z INFO : Bypass ACS check: 0
    2024-08-26T13:04:18.4915859Z INFO : Automatic Proxy detection disabled: 0
    2024-08-26T13:04:18.4915859Z INFO : No feedback mode on: 0
    2024-08-26T13:04:18.4915859Z INFO : Dump feedback enabled: 0
    2024-08-26T13:04:18.4925872Z INFO : Bypass competitor removal: 0
    2024-08-26T13:04:18.4925872Z INFO : Using CRT catalog file path: --
    2024-08-26T13:04:18.4925872Z INFO : Re-register installed endpoint with Central: 0
    2024-08-26T13:04:18.4935863Z INFO : Log messages between endpoint and Central: 0
    2024-08-26T13:04:18.4935863Z INFO : Log command-line passed to executables: 0
    2024-08-26T13:04:18.4935863Z INFO : Using custom server that hosts the installer stage2 filename: --
    2024-08-26T13:04:18.4935863Z INFO : Using cloud group: --
    2024-08-26T13:04:18.4935863Z INFO : Overriding computer name: --
    2024-08-26T13:04:18.4935863Z INFO : Overriding computer description: --
    2024-08-26T13:04:18.4946829Z INFO : Overriding domain name: --
    2024-08-26T13:04:18.4946829Z INFO : Language will be set to: --
    2024-08-26T13:04:18.4946829Z INFO : Using message relays: --
    2024-08-26T13:04:18.4946829Z INFO : Proxy address: --
    2024-08-26T13:04:18.4946829Z INFO : Proxy user name: --
    2024-08-26T13:04:18.4946829Z INFO : Using custom customer token: --
    2024-08-26T13:04:18.4946829Z INFO : Using specified products: --
    2024-08-26T13:04:18.4946829Z INFO : Using certificates from the program data folder: 0
    2024-08-26T13:04:18.4956148Z INFO : Setting non-persistent image: 0
    2024-08-26T13:04:18.4956148Z INFO : Setting gold image: 0
    2024-08-26T13:04:18.4956148Z INFO : MCS registration timeout for golden image: --
    2024-08-26T13:04:18.4956148Z INFO : Setting notification mode: 0
    2024-08-26T13:04:18.4966051Z INFO : Using custom customer ID: --
    2024-08-26T13:04:18.4966051Z INFO : Using specified user ID: --
    2024-08-26T13:04:18.4966051Z INFO : Using local install source: --
    2024-08-26T13:04:18.4966051Z INFO : ---
    2024-08-26T13:04:18.4995843Z INFO : Detected architecture: 3
    2024-08-26T13:04:18.4995843Z INFO : Using native program files for stage 2
    2024-08-26T13:04:18.5005880Z INFO : Target path: C:\\Program Files\\Sophos\\CloudInstaller
    2024-08-26T13:04:18.6096011Z INFO : About to delete: C:\\Program Files\\Sophos\\CloudInstaller
    2024-08-26T13:04:18.6096011Z INFO : Folder not present, nothing to delete
    2024-08-26T13:04:18.6106019Z INFO : Running on ARM64, requesting ARM64 Stage2
    2024-08-26T13:04:18.6135917Z INFO : Sending HTTP 'POST' request to: api/download/stage2-details/8c015571-1435-4ee9-921a-52580d1f29e7
    2024-08-26T13:04:18.6295864Z INFO : Did not discover an URL for a PAC file
    2024-08-26T13:04:18.6315932Z INFO : Attempting to connect using proxy '' of type 'Empty Proxy'.
    2024-08-26T13:04:18.6335930Z INFO : Set security protocol: 00000800
    2024-08-26T13:04:18.6335930Z INFO : Opening connection to api-cloudstation-eu-central-1.prod.hydra.sophos.com
    2024-08-26T13:04:18.6355854Z INFO : Request content size: 64
    2024-08-26T13:04:18.7315888Z INFO : Sending request
    2024-08-26T13:04:18.7325903Z INFO : Request sent
    2024-08-26T13:04:18.7715866Z INFO : Sending request
    2024-08-26T13:04:18.7715866Z INFO : Request sent
    2024-08-26T13:04:18.7736159Z INFO : Response status code: 200
    2024-08-26T13:04:18.7736159Z INFO : Response data size: 313
    2024-08-26T13:04:18.7746164Z INFO : trySendRequestThroughPotentialProxy returning response with status code: 200
    2024-08-26T13:04:18.7775860Z INFO : Parsing message received for Stage 2 filename: '{"downloads_server":"downloads.sophos.com","telemetry_server":"t1.sophosupd.com","diagnostics_server":"installer1.sophosupd.com","stage2_filename":"stage2-arm64-1.20.627.0-99c3b38508bb360b5992d7a3bb475252f2f3838079f3ebd971cb356a34d4c52f.tar.gz","mcs_server":"mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com"}'
    2024-08-26T13:04:18.7815884Z INFO : Sending HTTP 'GET' request to: full/central/windows/business/installer/stage2-arm64-1.20.627.0-99c3b38508bb360b5992d7a3bb475252f2f3838079f3ebd971cb356a34d4c52f.tar.gz
    2024-08-26T13:04:18.7835957Z INFO : Did not discover an URL for a PAC file
    2024-08-26T13:04:18.7835957Z INFO : Attempting to connect using proxy '' of type 'Empty Proxy'.
    2024-08-26T13:04:18.7855995Z INFO : Set security protocol: 00000800
    2024-08-26T13:04:18.7855995Z INFO : Opening connection to downloads.sophos.com
    2024-08-26T13:04:18.7855995Z INFO : Request content size: 0
    2024-08-26T13:04:18.8735908Z INFO : Sending request
    2024-08-26T13:04:18.8747205Z INFO : Request sent
    2024-08-26T13:04:19.7790626Z INFO : Response status code: 200
    2024-08-26T13:04:19.7799573Z INFO : Response data size: 2771743
    2024-08-26T13:04:19.7799573Z INFO : trySendRequestThroughPotentialProxy returning response with status code: 200
    2024-08-26T13:04:19.7849608Z INFO : Extracting files:
    2024-08-26T13:04:19.7859607Z INFO : integrity.dat
    2024-08-26T13:04:19.7889556Z INFO : manifest.dat
    2024-08-26T13:04:19.7949562Z INFO : SDDS3.dll
    2024-08-26T13:04:19.8359563Z INFO : SophosACSenabledTest.exe
    2024-08-26T13:04:19.8509705Z INFO : SophosSetup_Stage2.exe
    2024-08-26T13:04:19.9171083Z INFO : su-setup64.exe
    2024-08-26T13:04:19.9421108Z INFO : Management Certs/sophosca1.crl
    2024-08-26T13:04:19.9441117Z INFO : Management Certs/sophosca1.crt
    2024-08-26T13:04:19.9450361Z INFO : Management Certs/sophosca2.crl
    2024-08-26T13:04:19.9503595Z INFO : Management Certs/sophosca2.crt
    2024-08-26T13:04:19.9523608Z INFO : Management Certs/sophosca3.crl
    2024-08-26T13:04:19.9535340Z INFO : Management Certs/sophosca3.crt
    2024-08-26T13:04:19.9591220Z INFO : Management Certs/sophosca4.crl
    2024-08-26T13:04:19.9602752Z INFO : Management Certs/sophosca4.crt
    2024-08-26T13:04:19.9623306Z INFO : ManifestCerts/rootca384.crl
    2024-08-26T13:04:19.9681379Z INFO : ManifestCerts/rootca384.crt
    2024-08-26T13:04:20.0566852Z INFO : Running setup.
    2024-08-26T13:04:20.1563080Z INFO : Stage 2 command-line options:
    2024-08-26T13:04:20.1563080Z INFO : ---
    2024-08-26T13:04:20.1563080Z INFO : Parent PID: 7752
    2024-08-26T13:04:20.1573052Z INFO : MCS server: mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com
    2024-08-26T13:04:20.1573052Z INFO : Telemetry server: t1.sophosupd.com
    2024-08-26T13:04:20.1573052Z INFO : Diagnostics server: installer1.sophosupd.com
    2024-08-26T13:04:20.1573052Z INFO : Message relays: --
    2024-08-26T13:04:20.1573052Z INFO : Suppressing feedback: 0
    2024-08-26T13:04:20.1573052Z INFO : Dump feedback to disk: 0
    2024-08-26T13:04:20.1573052Z INFO : Setting non-persistent image: 0
    2024-08-26T13:04:20.1573052Z INFO : Setting gold image: 0
    2024-08-26T13:04:20.1573052Z INFO : MCS registration timeout for golden image: --
    2024-08-26T13:04:20.1573052Z INFO : Setting notification mode: 0
    2024-08-26T13:04:20.1583051Z INFO : Register only: 0
    2024-08-26T13:04:20.1583051Z INFO : Trail logging: 0
    2024-08-26T13:04:20.1583051Z INFO : Command-line logging: 0
    2024-08-26T13:04:20.1583051Z INFO : Bypassing competitor removal: 0
    2024-08-26T13:04:20.1583051Z INFO : CRT catalog: --
    2024-08-26T13:04:20.1583051Z INFO : Language: --
    2024-08-26T13:04:20.1583051Z INFO : Log files: C:\\ProgramData\\Sophos\\CloudInstaller\\Logs\\SophosCloudInstaller_20240826_130418.log
    2024-08-26T13:04:20.1583051Z INFO : Group: --
    2024-08-26T13:04:20.1583051Z INFO : Quiet: 0
    2024-08-26T13:04:20.1583051Z INFO : Bypass ownership check: 0
    2024-08-26T13:04:20.1583051Z INFO : Bypass ACS check: 0
    2024-08-26T13:04:20.1593336Z INFO : Virtual appliance: 0
    2024-08-26T13:04:20.1593336Z INFO : Proxy address: --
    2024-08-26T13:04:20.1593336Z INFO : Proxy user: --
    2024-08-26T13:04:20.1593336Z INFO : Overriding computer name: --
    2024-08-26T13:04:20.1593336Z INFO : Overriding computer description: --
    2024-08-26T13:04:20.1593336Z INFO : Overriding domain: --
    2024-08-26T13:04:20.1593336Z INFO : Disable proxy detection: 0
    2024-08-26T13:04:20.1593336Z INFO : Customer Token Specified: 8c015571-1435-4ee9-921a-52580d1f29e7
    2024-08-26T13:04:20.1593336Z INFO : Products: all
    2024-08-26T13:04:20.1593336Z INFO : Pipe write handle: 2028
    2024-08-26T13:04:20.1593336Z INFO : MCS Certificates Folder: 0
    2024-08-26T13:04:20.1593336Z INFO : MCS Customer Id: 381f7e60-63b2-6446-a913-f891789ece82
    2024-08-26T13:04:20.1593336Z INFO : User Id: --
    2024-08-26T13:04:20.1603266Z INFO : Local install source: --
    2024-08-26T13:04:20.1603266Z INFO : Partner Id: --
    2024-08-26T13:04:20.1603266Z INFO : Customer Estate Id: --
    2024-08-26T13:04:20.1603266Z INFO : ---
    2024-08-26T13:04:20.1623054Z INFO : User name: AdSwietoslawski
    2024-08-26T13:04:20.1633044Z INFO : NameDnsDomain: SOFTSYSTEM.DE\\AdSwietoslawski
    2024-08-26T13:04:20.1633044Z INFO : dnsDomain: SOFTSYSTEM.DE
    2024-08-26T13:04:20.2053860Z INFO : lpProfilePath: 
    2024-08-26T13:04:20.2084264Z INFO : User profile loaded
    2024-08-26T13:04:20.2084264Z INFO : Net API buffer freed
    2024-08-26T13:04:20.2084264Z INFO : Model::messageRelays value changed to be size: 0
    2024-08-26T13:04:20.2084264Z INFO : Model::group value changed to: 
    2024-08-26T13:04:20.2084264Z INFO : Model::parentPid value changed to: 7752
    2024-08-26T13:04:20.2094324Z INFO : Model::products changed to: all
    2024-08-26T13:04:20.2094324Z INFO : Model::customer token value changed to: 8c015571-1435-4ee9-921a-52580d1f29e7
    2024-08-26T13:04:20.2094324Z INFO : MCS Crts: C:\\Program Files\\Sophos\\CloudInstaller\\Management Certs\\sophosca1.crt,C:\\Program Files\\Sophos\\CloudInstaller\\Management Certs\\sophosca2.crt,C:\\Program Files\\Sophos\\CloudInstaller\\Management Certs\\sophosca3.crt,C:\\Program Files\\Sophos\\CloudInstaller\\Management Certs\\sophosca4.crt
    2024-08-26T13:04:20.2094324Z INFO : MCS CRLs: C:\\Program Files\\Sophos\\CloudInstaller\\Management Certs\\sophosca1.crl,C:\\Program Files\\Sophos\\CloudInstaller\\Management Certs\\sophosca2.crl,C:\\Program Files\\Sophos\\CloudInstaller\\Management Certs\\sophosca3.crl,C:\\Program Files\\Sophos\\CloudInstaller\\Management Certs\\sophosca4.crl
    2024-08-26T13:04:20.2094324Z INFO : Model:: MCS customer id value changed to: 381f7e60-63b2-6446-a913-f891789ece82
    2024-08-26T13:04:20.2094324Z INFO : Sophos Endpoint Defense is not installed
    2024-08-26T13:04:20.2094324Z INFO : Not tamper-protected by SED
    2024-08-26T13:04:20.2104325Z INFO : detectedMsiInstalledMcs.installed: 0
    2024-08-26T13:04:20.2104325Z INFO : Stage 1 version:1.20.627.0
    2024-08-26T13:04:20.2104325Z INFO : Stage 2 version:1.20.627.0
    2024-08-26T13:04:20.2104325Z INFO : OS version: 10.0.22631.
    2024-08-26T13:04:20.2104325Z INFO : Service pack: 0.0.
    2024-08-26T13:04:20.2115471Z INFO : System Language: 1031.
    2024-08-26T13:04:20.2115471Z INFO : User Language: 1031.
    2024-08-26T13:04:20.2115471Z INFO : 64 bit: no.
    2024-08-26T13:04:20.2144267Z INFO : Beginning command definition.
    2024-08-26T13:04:20.2144267Z INFO : Adding command to remove Sophos 'Image File Execution Options' keys.
    2024-08-26T13:04:20.2144267Z INFO : Adding command to wait for SAU update to complete.
    2024-08-26T13:04:20.2144267Z INFO : Adding competitor detection command.
    2024-08-26T13:04:20.2144267Z INFO : Adding command to register with Sophos cloud.
    2024-08-26T13:04:20.2154352Z INFO : Adding command to download product suite.
    2024-08-26T13:04:20.2174274Z INFO : Cache folder: C:\\ProgramData\\Sophos\\AutoUpdate\\cache
    2024-08-26T13:04:20.2174274Z INFO : No setup DLL found for component sau
    2024-08-26T13:04:20.2174274Z INFO : Adding command to uninstall Sophos AutoUpdate MSI
    2024-08-26T13:04:20.2174274Z INFO : Adding command to remove existing installation of Sophos AutoUpdate
    2024-08-26T13:04:20.2174274Z INFO : Adding command to allow tamper protected reinstalls.
    2024-08-26T13:04:20.2174274Z INFO : Adding commands to uninstall remaining existing products.
    2024-08-26T13:04:20.2174274Z INFO : Adding command to remove existing installation of Sophos System Protection
    2024-08-26T13:04:20.2174274Z INFO : Adding command to remove existing installation of Sophos Heartbeat
    2024-08-26T13:04:20.2174274Z INFO : Adding command to remove existing installation of Sophos Network Access Control
    2024-08-26T13:04:20.2174274Z INFO : Adding command to remove existing installation of Sophos Client Firewall
    2024-08-26T13:04:20.2184395Z INFO : Adding command to remove existing installation of Sophos Patch
    2024-08-26T13:04:20.2184395Z INFO : Adding command to remove existing installation of Sophos Clean
    2024-08-26T13:04:20.2184395Z INFO : Adding command to uninstall orphaned products.
    2024-08-26T13:04:20.2184395Z INFO : Adding command to prepare for installation.
    2024-08-26T13:04:20.2184395Z INFO : Adding command to install Sophos agent.
    2024-08-26T13:04:20.2184395Z INFO : Command definition complete.
    2024-08-26T13:04:20.2184395Z INFO : FindMainWindow: pid=7752
    2024-08-26T13:04:20.2194579Z INFO : Window is main control window of process
    2024-08-26T13:04:20.2194579Z INFO : ::EnumWindows stopped early; window found
    2024-08-26T13:04:20.2194579Z INFO : _bestHandle=0000000000050726
    2024-08-26T13:04:20.4484802Z INFO : Running System Property Check: VerifyTrust ...
    2024-08-26T13:04:20.4704780Z INFO : System Property Check: VerifyTrust - PASSED
    2024-08-26T13:04:20.5281542Z INFO : Running System Property Check: RequiredPrivilegesHeld ...
    2024-08-26T13:04:20.5292268Z INFO : All required privileges could be enabled
    2024-08-26T13:04:20.5292268Z INFO : System Property Check: RequiredPrivilegesHeld - PASSED
    2024-08-26T13:04:20.5933067Z INFO : Running System Property Check: TrustedHmpaFolder ...
    2024-08-26T13:04:20.5933067Z INFO : HMPA folder is trusted
    2024-08-26T13:04:20.5933067Z INFO : System Property Check: TrustedHmpaFolder - PASSED
    2024-08-26T13:04:20.6540038Z INFO : Running System Property Check: HostnameLength ...
    2024-08-26T13:04:20.6550036Z INFO : Initialized Winsock subsystem
    2024-08-26T13:04:20.6580046Z INFO : Valid hostname length
    2024-08-26T13:04:20.6590059Z INFO : System Property Check: HostnameLength - PASSED
    2024-08-26T13:04:20.7144049Z INFO : Running System Property Check: GroupNameLength ...
    2024-08-26T13:04:20.7144049Z INFO : System Property Check: GroupNameLength - PASSED
    2024-08-26T13:04:20.7774855Z INFO : Running System Property Check: JunctionPointsCheck ...
    2024-08-26T13:04:20.7814771Z INFO : Scanned 79 Sophos paths for junction points
    2024-08-26T13:04:20.7814771Z INFO : System Property Check: JunctionPointsCheck - PASSED
    2024-08-26T13:04:20.8400684Z INFO : Running System Property Check: PendingReboots ...
    2024-08-26T13:04:20.8400684Z INFO : Found pending file rename operations in the registry
    2024-08-26T13:04:20.8400684Z WARNING : System Property Check: PendingReboots recommended - FAILED
    2024-08-26T13:04:20.9017253Z INFO : Running System Property Check: PrimaryDriveSpace ...
    2024-08-26T13:04:20.9027753Z INFO : Enough space: 23226 Mb
    2024-08-26T13:04:20.9027753Z INFO : System Property Check: PrimaryDriveSpace - PASSED
    2024-08-26T13:04:20.9640134Z INFO : Running System Property Check: MsXml ...
    2024-08-26T13:04:20.9700171Z INFO : System Property Check: MsXml - PASSED
    2024-08-26T13:04:21.0289517Z INFO : Running System Property Check: NotFirewall ...
    2024-08-26T13:04:21.0289517Z INFO : System Property Check: NotFirewall - PASSED
    2024-08-26T13:04:21.0929304Z INFO : Running System Property Check: NotHitmanProAlertIncompatible ...
    2024-08-26T13:04:21.0929304Z INFO : No HitmanPro.Alert Installed
    2024-08-26T13:04:21.0929304Z INFO : System Property Check: NotHitmanProAlertIncompatible - PASSED
    2024-08-26T13:04:21.1541955Z INFO : Running System Property Check: NotInvincea ...
    2024-08-26T13:04:21.1541955Z INFO : System Property Check: NotInvincea - PASSED
    2024-08-26T13:04:21.2179604Z INFO : Running System Property Check: NotMessageRelay ...
    2024-08-26T13:04:21.2179604Z INFO : RMS is not installed on the endpoint
    2024-08-26T13:04:21.2179604Z INFO : System Property Check: NotMessageRelay - PASSED
    2024-08-26T13:04:21.2794062Z INFO : Running System Property Check: NotNac ...
    2024-08-26T13:04:21.2794062Z INFO : System Property Check: NotNac - PASSED
    2024-08-26T13:04:21.3444411Z INFO : Running System Property Check: NotPatch ...
    2024-08-26T13:04:21.3454277Z INFO : System Property Check: NotPatch - PASSED
    2024-08-26T13:04:21.4061280Z INFO : Running System Property Check: NotPureMessageDomino ...
    2024-08-26T13:04:21.4061280Z INFO : System Property Check: NotPureMessageDomino - PASSED
    2024-08-26T13:04:21.4691036Z INFO : Running System Property Check: NotPureMessageExchangeWithAntiSpam ...
    2024-08-26T13:04:21.4691036Z INFO : System Property Check: NotPureMessageExchangeWithAntiSpam - PASSED
    2024-08-26T13:04:21.5330550Z INFO : Running System Property Check: NotSav ...
    2024-08-26T13:04:21.5330550Z INFO : System Property Check: NotSav - PASSED
    2024-08-26T13:04:21.5944979Z INFO : Running System Property Check: NotSharePoint ...
    2024-08-26T13:04:21.5944979Z INFO : System Property Check: NotSharePoint - PASSED
    2024-08-26T13:04:21.6590950Z INFO : Running System Property Check: NotSecServer ...
    2024-08-26T13:04:21.6600125Z INFO : System Property Check: NotSecServer - PASSED
    2024-08-26T13:04:21.7214195Z INFO : Running System Property Check: NotSum ...
    2024-08-26T13:04:21.7214195Z INFO : System Property Check: NotSum - PASSED
    2024-08-26T13:04:21.7840131Z INFO : Running System Property Check: NotBlockedByTamperProtection ...
    2024-08-26T13:04:21.7840131Z INFO : Not tamper protected
    2024-08-26T13:04:21.7840131Z INFO : System Property Check: NotBlockedByTamperProtection - PASSED
    2024-08-26T13:04:21.8473170Z INFO : Running System Property Check: RAMSize ...
    2024-08-26T13:04:21.8473170Z INFO : System Property Check: RAMSize - PASSED
    2024-08-26T13:04:21.9095927Z INFO : Running System Property Check: CpuCoreCount ...
    2024-08-26T13:04:21.9095927Z INFO : Logical processor core count: 12
    2024-08-26T13:04:21.9095927Z INFO : System Property Check: CpuCoreCount - PASSED
    2024-08-26T13:04:21.9729525Z INFO : Running System Property Check: SupportedArchitecture ...
    2024-08-26T13:04:21.9729525Z INFO : Running on ARM64
    2024-08-26T13:04:21.9729525Z INFO : System Property Check: SupportedArchitecture - PASSED
    2024-08-26T13:04:22.0341126Z INFO : Running System Property Check: SupportedOS ...
    2024-08-26T13:04:22.0341126Z INFO : Running on ARM64 workstation.
    2024-08-26T13:04:22.0341126Z INFO : System Property Check: SupportedOS - PASSED
    2024-08-26T13:04:22.0975546Z INFO : Running System Property Check: SupportedPatches ...
    2024-08-26T13:04:22.0975546Z INFO : System Property Check: SupportedPatches - PASSED
    2024-08-26T13:04:22.1590403Z INFO : Running System Property Check: AzureCodeSigning ...
    2024-08-26T13:04:22.1990471Z INFO : ACS supported
    2024-08-26T13:04:22.1990471Z INFO : System Property Check: AzureCodeSigning - PASSED
    2024-08-26T13:04:22.2530929Z INFO : Running System Property Check: DotNetFramework ...
    2024-08-26T13:04:22.2530929Z INFO : Supported .NET version is present
    2024-08-26T13:04:22.2530929Z INFO : System Property Check: DotNetFramework - PASSED
    2024-08-26T13:04:22.3152992Z INFO : Running System Property Check: ValidTempDirectory ...
    2024-08-26T13:04:22.3152992Z INFO : Temp folder exists.
    2024-08-26T13:04:22.3152992Z INFO : System Property Check: ValidTempDirectory - PASSED
    2024-08-26T13:04:22.3762192Z INFO : Running System Property Check: ValidLocalInstallSourceDirectory ...
    2024-08-26T13:04:22.3762192Z INFO : No local install source folder to validate.
    2024-08-26T13:04:22.3762192Z INFO : System Property Check: ValidLocalInstallSourceDirectory - PASSED
    2024-08-26T13:04:22.4391152Z INFO : Running System Property Check: ValidServer ...
    2024-08-26T13:04:22.4391152Z INFO : System Property Check: ValidServer - PASSED
    2024-08-26T13:04:22.5027727Z INFO : Running System Property Check: ValidDeploymentInfo ...
    2024-08-26T13:04:22.5027727Z INFO : Current Time: 2024-08-26T13:04:22.502000
    2024-08-26T13:04:22.5048308Z INFO : This computer is part of the domain SOFTSYSTEM
    2024-08-26T13:04:22.5048308Z INFO : Domain Name: SOFTSYSTEM
    2024-08-26T13:04:22.5048308Z INFO : Computer Name: NB-E02-WIN11
    2024-08-26T13:04:22.5048308Z INFO : Computer Description is not available. 
    2024-08-26T13:04:22.5048308Z INFO : Operating system friendly name: Windows 11 Pro 
    2024-08-26T13:04:22.5048308Z INFO : Operating system for status: WIN11
    2024-08-26T13:04:22.5048308Z INFO : ProductType: 48
    2024-08-26T13:04:22.5098237Z INFO : Session user: SOFTSYSTEM\\AdSwietoslawski
    2024-08-26T13:04:22.5098237Z INFO : Last logged on user: SOFTSYSTEM\\AdSwietoslawski
    2024-08-26T13:04:22.5098237Z INFO : User principal name: AdSwietoslawski@SoftSystem.de
    2024-08-26T13:04:22.5108232Z INFO : Fully Qualified Domain Name: NB-E02-WIN11.SoftSystem.de
    2024-08-26T13:04:22.5108232Z INFO : Processor architecture: arm64
    2024-08-26T13:04:22.5108232Z INFO : OS Major Version: 11 and OS Minor Version: 0
    2024-08-26T13:04:22.5108232Z INFO : Friendly OS Name: WIN11
    2024-08-26T13:04:22.5108232Z INFO : Is server?: 0
    2024-08-26T13:04:22.5118285Z INFO : Sending HTTP 'POST' request to: sophos/management/ep/install/deployment-info/3
    2024-08-26T13:04:22.5138278Z INFO : Did not discover an URL for a PAC file
    2024-08-26T13:04:22.5148235Z INFO : Attempting to connect using proxy '' of type 'Empty Proxy'.
    2024-08-26T13:04:22.5148235Z INFO : Set security protocol: 00000800
    2024-08-26T13:04:22.5148235Z INFO : Opening connection to mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com
    2024-08-26T13:04:22.5148235Z INFO : Sending request for connection confirmation through potential proxy
    2024-08-26T13:04:22.5148235Z INFO : Request content size: 0
    2024-08-26T13:04:22.6006204Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
    2024-08-26T13:04:22.6016187Z INFO : Subject certificate failed validation against root CA: SophosCA1
    2024-08-26T13:04:22.6026199Z INFO : Subject certificate failed validation against root CA: SophosCA2
    2024-08-26T13:04:22.6026199Z INFO : Certificate check succeeded
    2024-08-26T13:04:22.6036181Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
    2024-08-26T13:04:22.6143980Z INFO : Response status code: 200
    2024-08-26T13:04:22.6153922Z INFO : Response data size: 168
    2024-08-26T13:04:22.6153922Z INFO : trySendRequestThroughPotentialProxy returning response with status code: 200
    2024-08-26T13:04:22.6153922Z INFO : Request content size: 1619
    2024-08-26T13:04:22.6153922Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
    2024-08-26T13:04:22.6163927Z INFO : Subject certificate failed validation against root CA: SophosCA1
    2024-08-26T13:04:22.6163927Z INFO : Subject certificate failed validation against root CA: SophosCA2
    2024-08-26T13:04:22.6173906Z INFO : Certificate check succeeded
    2024-08-26T13:04:22.6173906Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
    2024-08-26T13:04:22.6776525Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
    2024-08-26T13:04:22.6786819Z INFO : Subject certificate failed validation against root CA: SophosCA1
    2024-08-26T13:04:22.6786819Z INFO : Subject certificate failed validation against root CA: SophosCA2
    2024-08-26T13:04:22.6797256Z INFO : Certificate check succeeded
    2024-08-26T13:04:22.6797256Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
    2024-08-26T13:04:22.6806893Z INFO : Response status code: 200
    2024-08-26T13:04:22.6806893Z INFO : Response data size: 279
    2024-08-26T13:04:22.6806893Z INFO : Parsing message received for deployment token: {"dciFileName":"41aea06e7cf0d70e17fc260874fb911c","products":[{"product":"DEVICE_ENCRYPTION","supported":true,"reasons":[]},{"product":"INTERCEPT_ADVANCED_MDR","supported":true,"reasons":[]}],"registrationToken":"1b945a0248788f15d68b15a6ca350f9cf2ce27298ac3ac66149c629c0d15aac0"}
    2024-08-26T13:04:22.6806893Z INFO : Model::token value changed to: 1b945a0248788f15d68b15a6ca350f9cf2ce27298ac3ac66149c629c0d15aac0
    2024-08-26T13:04:22.6806893Z INFO : Licenses available: DEVICE_ENCRYPTION INTERCEPT_ADVANCED_MDR 
    2024-08-26T13:04:22.8637592Z INFO : Running System Property Check: InstallationInProgress ...
    2024-08-26T13:04:22.8637592Z INFO : System Property Check: InstallationInProgress - PASSED
    2024-08-26T13:04:22.9286728Z INFO : Running System Property Check: SafeGuardEncryption ...
    2024-08-26T13:04:22.9286728Z INFO : Entered installedProductCode, upgradeCode={BA2F47D3-1C17-40E7-8DE7-1CD733442B6C}
    2024-08-26T13:04:22.9286728Z INFO : Product is not installed
    2024-08-26T13:04:22.9286728Z INFO : licensesContainFeature(DEVICE_ENCRYPTION): true
    2024-08-26T13:04:22.9286728Z INFO : System Property Check: SafeGuardEncryption - PASSED
    2024-08-26T13:04:35.7990159Z INFO : Starting installation process.
    2024-08-26T13:04:35.8000162Z INFO : About to execute command: CleanSophosIfeoKeysCommand
    2024-08-26T13:04:35.8040178Z INFO : Command 'CleanSophosIfeoKeysCommand' completed with success with reboot code '0' and error message ''.
    2024-08-26T13:04:35.8040178Z INFO : About to execute command: WaitForSauUpdateCommand
    2024-08-26T13:04:35.8040178Z INFO : Waiting for operation to succeed within 900000ms.
    2024-08-26T13:04:35.8040178Z INFO : AutoUpdate folder: C:\\Program Files\\Sophos\\AutoUpdate
    2024-08-26T13:04:35.8050116Z INFO : Cache folder: C:\\ProgramData\\Sophos\\AutoUpdate\\cache
    2024-08-26T13:04:35.8050116Z INFO : Cache folder: C:\\ProgramData\\Sophos\\AutoUpdate\\cache
    2024-08-26T13:04:35.8050116Z INFO : SAU not updating - continuing with installation
    2024-08-26T13:04:35.8050116Z INFO : Data folder: C:\\ProgramData\\Sophos\\AutoUpdate\\data
    2024-08-26T13:04:35.8050116Z INFO : Command 'WaitForSauUpdateCommand' completed with success with reboot code '0' and error message ''.
    2024-08-26T13:04:35.8050116Z INFO : About to execute command: CompetitorDetector
    2024-08-26T13:04:35.8110143Z INFO : Command 'CompetitorDetector' completed with success with reboot code '0' and error message ''.
    2024-08-26T13:04:35.8110143Z INFO : About to execute command: Register
    2024-08-26T13:04:35.8110143Z INFO : Ensuring any MCS client service is stopped to prevent race for policy retrieval
    2024-08-26T13:04:35.8120141Z INFO : Sending HTTP 'POST' request to: sophos/management/ep/install/register
    2024-08-26T13:04:35.8130261Z INFO : Did not discover an URL for a PAC file
    2024-08-26T13:04:35.8130261Z INFO : Attempting to connect using proxy '' of type 'Empty Proxy'.
    2024-08-26T13:04:35.8140157Z INFO : Set security protocol: 00000800
    2024-08-26T13:04:35.8140157Z INFO : Opening connection to mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com
    2024-08-26T13:04:35.8140157Z INFO : Sending request for connection confirmation through potential proxy
    2024-08-26T13:04:35.8150145Z INFO : Request content size: 0
    2024-08-26T13:04:35.8150145Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
    2024-08-26T13:04:35.8160118Z INFO : Subject certificate failed validation against root CA: SophosCA1
    2024-08-26T13:04:35.8160118Z INFO : Subject certificate failed validation against root CA: SophosCA2
    2024-08-26T13:04:35.8170491Z INFO : Certificate check succeeded
    2024-08-26T13:04:35.8180398Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
    2024-08-26T13:04:35.8288797Z INFO : Response status code: 200
    2024-08-26T13:04:35.8288797Z INFO : Response data size: 168
    2024-08-26T13:04:35.8288797Z INFO : trySendRequestThroughPotentialProxy returning response with status code: 200
    2024-08-26T13:04:35.8288797Z INFO : Request content size: 1619
    2024-08-26T13:04:35.8299693Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
    2024-08-26T13:04:35.8299693Z INFO : Subject certificate failed validation against root CA: SophosCA1
    2024-08-26T13:04:35.8309447Z INFO : Subject certificate failed validation against root CA: SophosCA2
    2024-08-26T13:04:35.8309447Z INFO : Certificate check succeeded
    2024-08-26T13:04:35.8319573Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
    2024-08-26T13:04:36.2549208Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
    2024-08-26T13:04:36.2559877Z INFO : Subject certificate failed validation against root CA: SophosCA1
    2024-08-26T13:04:36.2569853Z INFO : Subject certificate failed validation against root CA: SophosCA2
    2024-08-26T13:04:36.2579838Z INFO : Certificate check succeeded
    2024-08-26T13:04:36.2579838Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
    2024-08-26T13:04:36.2579838Z INFO : Response status code: 200
    2024-08-26T13:04:36.2579838Z INFO : Response data size: 72
    2024-08-26T13:04:36.2579838Z INFO : Retrieved endpoint id: 30ac8164-83eb-a4aa-781a-cbf9ba4206c2
    2024-08-26T13:04:37.2738890Z INFO : Sending HTTP 'POST' request to: sophos/management/ep/install/authenticate/endpoint/30ac8164-83eb-a4aa-781a-cbf9ba4206c2/role/endpoint
    2024-08-26T13:04:37.2738890Z INFO : Request content size: 0
    2024-08-26T13:04:37.2758893Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
    2024-08-26T13:04:37.2768889Z INFO : Subject certificate failed validation against root CA: SophosCA1
    2024-08-26T13:04:37.2768889Z INFO : Subject certificate failed validation against root CA: SophosCA2
    2024-08-26T13:04:37.2778956Z INFO : Certificate check succeeded
    2024-08-26T13:04:37.2788844Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
    2024-08-26T13:04:37.4187419Z INFO : Response status code: 200
    2024-08-26T13:04:37.4187419Z INFO : Response data size: 1038
    2024-08-26T13:04:37.4187419Z INFO : Retrieved mcs auth: tenant_id=83f1e706-362b-4664-9a31-8f1987e9ec28 device_id=03ca1846-38be-4aaa-87a1-bc9fab24602c
    2024-08-26T13:04:37.4197840Z INFO : MCS Auth token features: f_endpoint_updating
    2024-08-26T13:04:37.4197840Z INFO : MCS Auth token features: f_ep_scheduledquery
    2024-08-26T13:04:37.4197840Z INFO : Sending HTTP 'GET' request to: sophos/management/ep/install/flags/endpoint/30ac8164-83eb-a4aa-781a-cbf9ba4206c2
    2024-08-26T13:04:37.4197840Z INFO : Request content size: 0
    2024-08-26T13:04:37.4208631Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
    2024-08-26T13:04:37.4217851Z INFO : Subject certificate failed validation against root CA: SophosCA1
    2024-08-26T13:04:37.4217851Z INFO : Subject certificate failed validation against root CA: SophosCA2
    2024-08-26T13:04:37.4227851Z INFO : Certificate check succeeded
    2024-08-26T13:04:37.4237956Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
    2024-08-26T13:04:37.5046385Z INFO : Response status code: 200
    2024-08-26T13:04:37.5046385Z INFO : Response data size: 6607
    2024-08-26T13:04:37.5046385Z INFO : Loaded 177 endpoint flags
    2024-08-26T13:04:37.5046385Z INFO : Fetching policy through MCS v1 API
    2024-08-26T13:04:37.5046385Z INFO : Sending HTTP 'PUT' request to: sophos/management/ep/install/statuses/endpoint/30ac8164-83eb-a4aa-781a-cbf9ba4206c2
    2024-08-26T13:04:37.5056346Z INFO : Request content size: 990
    2024-08-26T13:04:37.5056346Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
    2024-08-26T13:04:37.5066374Z INFO : Subject certificate failed validation against root CA: SophosCA1
    2024-08-26T13:04:37.5076386Z INFO : Subject certificate failed validation against root CA: SophosCA2
    2024-08-26T13:04:37.5076386Z INFO : Certificate check succeeded
    2024-08-26T13:04:37.5086413Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
    2024-08-26T13:04:37.6894287Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
    2024-08-26T13:04:37.6904566Z INFO : Subject certificate failed validation against root CA: SophosCA1
    2024-08-26T13:04:37.6914570Z INFO : Subject certificate failed validation against root CA: SophosCA2
    2024-08-26T13:04:37.6924572Z INFO : Certificate check succeeded
    2024-08-26T13:04:37.6924572Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
    2024-08-26T13:04:37.6924572Z INFO : Response status code: 200
    2024-08-26T13:04:37.6924572Z INFO : Response data size: 0
    2024-08-26T13:04:37.6924572Z INFO : Attempt to retrieve policy.
    2024-08-26T13:04:37.6924572Z INFO : Sending HTTP 'GET' request to: sophos/management/ep/install/commands/applications/APPSPROXY;ALC/endpoint/30ac8164-83eb-a4aa-781a-cbf9ba4206c2
    2024-08-26T13:04:37.6934535Z INFO : Request content size: 0
    2024-08-26T13:04:37.6934535Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
    2024-08-26T13:04:37.6944549Z INFO : Subject certificate failed validation against root CA: SophosCA1
    2024-08-26T13:04:37.6944549Z INFO : Subject certificate failed validation against root CA: SophosCA2
    2024-08-26T13:04:37.6954541Z INFO : Certificate check succeeded
    2024-08-26T13:04:37.6964594Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
    2024-08-26T13:04:37.7099944Z INFO : Response status code: 200
    2024-08-26T13:04:37.7099944Z INFO : Response data size: 790
    2024-08-26T13:04:37.7099944Z INFO : Successfully retrieved policy with policyId='c3b010e2dcf0808c02d4fcd8fbd783b295a0bf8beb70e16f1ef3060d63debd7a'.
    2024-08-26T13:04:37.7110231Z INFO : Sending HTTP 'DELETE' request to: sophos/management/ep/install/commands/endpoint/30ac8164-83eb-a4aa-781a-cbf9ba4206c2/43
    2024-08-26T13:04:37.7110231Z INFO : Request content size: 0
    2024-08-26T13:04:37.7110231Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
    2024-08-26T13:04:37.7120364Z INFO : Subject certificate failed validation against root CA: SophosCA1
    2024-08-26T13:04:37.7130497Z INFO : Subject certificate failed validation against root CA: SophosCA2
    2024-08-26T13:04:37.7140206Z INFO : Certificate check succeeded
    2024-08-26T13:04:37.7150228Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
    2024-08-26T13:04:37.7619106Z INFO : Response status code: 200
    2024-08-26T13:04:37.7619106Z INFO : Response data size: 0
    2024-08-26T13:04:37.7629319Z INFO : Sending HTTP 'GET' request to: sophos/management/ep/install/policy/application/ALC/c3b010e2dcf0808c02d4fcd8fbd783b295a0bf8beb70e16f1ef3060d63debd7a
    2024-08-26T13:04:37.7629319Z INFO : Request content size: 0
    2024-08-26T13:04:37.7639614Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
    2024-08-26T13:04:37.7649306Z INFO : Subject certificate failed validation against root CA: SophosCA1
    2024-08-26T13:04:37.7649306Z INFO : Subject certificate failed validation against root CA: SophosCA2
    2024-08-26T13:04:37.7659385Z INFO : Certificate check succeeded
    2024-08-26T13:04:37.7669408Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
    2024-08-26T13:04:37.8429289Z INFO : Response status code: 200
    2024-08-26T13:04:37.8429289Z INFO : Response data size: 3541
    2024-08-26T13:04:37.8429289Z INFO : Subscription id: Base, rigidname: WindowsCloudNextGen, baseversion: 11, tag: RECOMMENDED, fixedversion: 
    2024-08-26T13:04:37.8439425Z INFO : Subscription id: Clean, rigidname: WindowsCloudClean, baseversion: 1, tag: RECOMMENDED, fixedversion: 
    2024-08-26T13:04:37.8439425Z INFO : Subscription id: CloudAV, rigidname: WindowsCloudAV, baseversion: 11, tag: RECOMMENDED, fixedversion: 
    2024-08-26T13:04:37.8439425Z INFO : Subscription id: Encryption, rigidname: WindowsCloudEncryption, baseversion: 1, tag: RECOMMENDED, fixedversion: 
    2024-08-26T13:04:37.8439425Z INFO : Subscription id: HitmanProAlert, rigidname: WindowsCloudHitmanProAlert, baseversion: 1, tag: RECOMMENDED, fixedversion: 
    2024-08-26T13:04:37.8439425Z INFO : Subscription id: MDR, rigidname: WindowsCloudMDR, baseversion: , tag: RECOMMENDED, fixedversion: 
    2024-08-26T13:04:37.8439425Z INFO : Fixed version token: 1fa7e4d2-a338-53fe-8573-6f03afbf8c90, name: FTS 2023.2.1.31-MR3
    2024-08-26T13:04:37.8449506Z INFO : Feature: APPCNTRL
    2024-08-26T13:04:37.8449506Z INFO : Feature: AV
    2024-08-26T13:04:37.8449506Z INFO : Feature: CLEAN
    2024-08-26T13:04:37.8449506Z INFO : Feature: CORE
    2024-08-26T13:04:37.8449506Z INFO : Feature: DLP
    2024-08-26T13:04:37.8459366Z INFO : Feature: DVCCNTRL
    2024-08-26T13:04:37.8459366Z INFO : Feature: EFW
    2024-08-26T13:04:37.8459366Z INFO : Feature: HBT
    2024-08-26T13:04:37.8459366Z INFO : Feature: NTP
    2024-08-26T13:04:37.8459366Z INFO : Feature: SAV
    2024-08-26T13:04:37.8469271Z INFO : Feature: SDU
    2024-08-26T13:04:37.8469271Z INFO : Feature: WEBCNTRL
    2024-08-26T13:04:37.8469271Z INFO : Feature: XPD
    2024-08-26T13:04:37.8469271Z INFO : Server for 'sus': sus.sophosupd.com
    2024-08-26T13:04:37.8469271Z INFO : Server for 'content_server': sdds3.sophosupd.com
    2024-08-26T13:04:37.8469271Z INFO : Server for 'content_server': sdds3.sophosupd.net
    2024-08-26T13:04:37.8469271Z INFO : Server for 'telemetry': t1.sophosupd.com
    2024-08-26T13:04:37.8469271Z INFO : Server for 'feedback': sdu-feedback.sophos.com
    2024-08-26T13:04:37.8479435Z INFO : Server for 'repairkit': sdu-auto-upload.sophosupd.com
    2024-08-26T13:04:37.8479435Z INFO : Restarting MCS Client service if stopped
    2024-08-26T13:04:37.8479435Z INFO : Command 'Register' completed with success with reboot code '0' and error message ''.
    2024-08-26T13:04:37.8479435Z INFO : About to execute command: Download
    2024-08-26T13:04:37.8479435Z INFO : Update Cache Cert Path folder: C:\\ProgramData\\Sophos\\Certificates\\AutoUpdate\\Cache
    2024-08-26T13:04:37.8489311Z INFO : CRT required: adding 'CRT' feature
    2024-08-26T13:04:37.9009231Z INFO : Using SDDS3 delta version: 3
    2024-08-26T13:04:37.9009231Z INFO : SUS service request body: {"schema_version":"1","product":"winep","server":false,"platform_token":"WIN_11_ARM64","platform_release":"2009 22631.4037","os_version":"11.0","subscriptions":[{"id":"WindowsCloudAV","tag":"RECOMMENDED"},{"id":"WindowsCloudClean","tag":"RECOMMENDED"},{"id":"WindowsCloudEncryption","tag":"RECOMMENDED"},{"id":"WindowsCloudHitmanProAlert","tag":"RECOMMENDED"},{"id":"WindowsCloudMDR","tag":"RECOMMENDED"},{"id":"WindowsCloudNextGen","tag":"RECOMMENDED"}],"fixed_version_token":"1fa7e4d2-a338-53fe-8573-6f03afbf8c90"}
    2024-08-26T13:04:37.9009231Z INFO : No manually configured proxy
    2024-08-26T13:04:37.9019238Z INFO : WinHttp default proxy not set
    2024-08-26T13:04:37.9029242Z INFO : WinHttp discovered proxies not found
    2024-08-26T13:04:37.9029242Z INFO : Trying update service url https://sus.sophosupd.com/v3/83f1e706-362b-4664-9a31-8f1987e9ec28/03ca1846-38be-4aaa-87a1-bc9fab24602c with proxy: <direct; no proxy>
    2024-08-26T13:04:38.0542010Z INFO : 200 from https://sus.sophosupd.com/v3/83f1e706-362b-4664-9a31-8f1987e9ec28/03ca1846-38be-4aaa-87a1-bc9fab24602c with proxy: <direct; no proxy> (peer address 54.170.4.213)
    2024-08-26T13:04:38.0551797Z INFO : SUS response body: {"error": "200 OK", "reason": "Presented fixed version token is EOL", "code": "FIXED_VERSION_TOKEN_EOL"}
    2024-08-26T13:04:38.0551797Z INFO : SUS response body size: 104
    2024-08-26T13:04:38.0581733Z INFO : Sophos Update Service response: error='200 OK' reason='Presented fixed version token is EOL' code='FIXED_VERSION_TOKEN_EOL'
    2024-08-26T13:04:38.0581733Z ERROR : Error: Sophos Update Service failed to provide suites
    2024-08-26T13:04:38.0581733Z ERROR : DownloadCommand::onRun() failed with std::exception: SDDS3 sync failed
    2024-08-26T13:04:38.0581733Z INFO : Command 'Download' completed with failure with reboot code '0' and error message 'Software konnte nicht heruntergeladen werden'.
    2024-08-26T13:04:38.0581733Z ERROR : Installation failed.
    2024-08-26T13:04:38.0591702Z INFO : Sending HTTP 'POST' request to: sophos/management/ep/install/events/endpoint/30ac8164-83eb-a4aa-781a-cbf9ba4206c2
    2024-08-26T13:04:38.0601713Z INFO : Did not discover an URL for a PAC file
    2024-08-26T13:04:38.0601713Z INFO : Attempting to connect using proxy '' of type 'Empty Proxy'.
    2024-08-26T13:04:38.0611737Z INFO : Set security protocol: 00000800
    2024-08-26T13:04:38.0611737Z INFO : Opening connection to mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com
    2024-08-26T13:04:38.0611737Z INFO : Sending request for connection confirmation through potential proxy
    2024-08-26T13:04:38.0611737Z INFO : Request content size: 0
    2024-08-26T13:04:38.0621755Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
    2024-08-26T13:04:38.0621755Z INFO : Subject certificate failed validation against root CA: SophosCA1
    2024-08-26T13:04:38.0631712Z INFO : Subject certificate failed validation against root CA: SophosCA2
    2024-08-26T13:04:38.0642391Z INFO : Certificate check succeeded
    2024-08-26T13:04:38.0642391Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
    2024-08-26T13:04:38.0740063Z INFO : Response status code: 200
    2024-08-26T13:04:38.0740063Z INFO : Response data size: 168
    2024-08-26T13:04:38.0740063Z INFO : trySendRequestThroughPotentialProxy returning response with status code: 200
    2024-08-26T13:04:38.0740063Z INFO : Request content size: 973
    2024-08-26T13:04:38.0751150Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
    2024-08-26T13:04:38.0760752Z INFO : Subject certificate failed validation against root CA: SophosCA1
    2024-08-26T13:04:38.0760752Z INFO : Subject certificate failed validation against root CA: SophosCA2
    2024-08-26T13:04:38.0760752Z INFO : Certificate check succeeded
    2024-08-26T13:04:38.0771260Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
    2024-08-26T13:04:38.1318851Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
    2024-08-26T13:04:38.1329129Z INFO : Subject certificate failed validation against root CA: SophosCA1
    2024-08-26T13:04:38.1329129Z INFO : Subject certificate failed validation against root CA: SophosCA2
    2024-08-26T13:04:38.1329129Z INFO : Certificate check succeeded
    2024-08-26T13:04:38.1339310Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
    2024-08-26T13:04:38.1339310Z INFO : Response status code: 200
    2024-08-26T13:04:38.1339310Z INFO : Response data size: 0
    2024-08-26T13:05:54.6808566Z INFO : Data folder: C:\\ProgramData\\Sophos\\AutoUpdate\\data
    2024-08-26T13:05:54.6958521Z INFO : Sending HTTP 'PUT' request to: prod/2024-08-26T13:05:54Z-2024-08-26T13:05:54Z-13966ac3-46f4-57d7-bba6-efbb7735308e.json
    2024-08-26T13:05:54.6998503Z INFO : Did not discover an URL for a PAC file
    2024-08-26T13:05:54.6998503Z INFO : Attempting to connect using proxy '' of type 'Empty Proxy'.
    2024-08-26T13:05:54.7008521Z INFO : Set security protocol: 00000800
    2024-08-26T13:05:54.7008521Z INFO : Opening connection to t1.sophosupd.com
    2024-08-26T13:05:54.7019136Z INFO : Request content size: 4207
    2024-08-26T13:05:54.7946905Z INFO : Sending request
    2024-08-26T13:05:54.7946905Z INFO : Request sent
    2024-08-26T13:05:54.8997225Z INFO : Sending request
    2024-08-26T13:05:54.8997225Z INFO : Request sent
    2024-08-26T13:05:54.8997225Z INFO : Response status code: 200
    2024-08-26T13:05:54.9007812Z INFO : Response data size: 0
    2024-08-26T13:05:54.9007812Z INFO : trySendRequestThroughPotentialProxy returning response with status code: 200
    2024-08-26T13:05:54.9007812Z INFO : Telemetry Response: 
    2024-08-26T13:05:54.9007812Z INFO : Install result: Failed
    2024-08-26T13:05:54.9027777Z INFO : User profile unloaded
    2024-08-26T13:05:54.9117770Z INFO : Cleaning up extracted files
    2024-08-26T13:05:54.9167775Z ERROR : Error downloading/running stage 2: Setup program failed with code: 1
    2024-08-26T13:05:54.9197764Z ERROR : Exception: Setup program failed with code: 1
    

Children