Windows 11 ARM

Does Sophos (Intercept X) work on the New Arm processors for Windows 11 Surface Laptops?

If so where do we get the Intercept X download from/for Sophos Central?

Thanks.



Edit tags
[edited by: GlennSen at 8:07 AM (GMT -7) on 3 Jul 2024]
Parents
  • Hi  

    Thank you for reaching out to Sophos Community.

    Sophos Intercept X works on both Windows 10 and Windows 11 ARM64 devices.

    To download the installer:

    1. Sign in to Sophos Central.
    2. Go to Devices > Installers.
    3. Under Endpoint Protection, click Download Complete Windows Installer

    For more information please refer to the article: Sophos Central Endpoint and Server: Installation methods

    Abhimanyu Rawat
    Sophos Digital Support
    Are you a Sophos Partner? | Product Documentation | @SophosSupport | Sign up for SMS Alerts
    If a post solves your question, please use the "Verify Answer" button.
    The New Home of Sophos Support Videos!  Visit Sophos Techvids
  • Hi Everyone!

    One of our employees needs to install Sophos intercept X on a virtual machine on which Windows 11 is installed
    It currently runs on a Mac and has an ARM64 architecture processor
    Unfortunately, we are not able to install Sophos on this virtual machine.
    Can you please help in locating the Problem??

    2024-08-26T13:04:18.4875863Z INFO : Running C:\\Users\\ADSWIE~1\\AppData\\Local\\Temp\\SophosSetup-570162558\\Setup.exe
    2024-08-26T13:04:18.4905891Z INFO : Stage 1 command-line options:
    2024-08-26T13:04:18.4905891Z INFO : ---
    2024-08-26T13:04:18.4915859Z INFO : Quiet mode on: 0
    2024-08-26T13:04:18.4915859Z INFO : Bypass ownership check: 0
    2024-08-26T13:04:18.4915859Z INFO : Bypass ACS check: 0
    2024-08-26T13:04:18.4915859Z INFO : Automatic Proxy detection disabled: 0
    2024-08-26T13:04:18.4915859Z INFO : No feedback mode on: 0
    2024-08-26T13:04:18.4915859Z INFO : Dump feedback enabled: 0
    2024-08-26T13:04:18.4925872Z INFO : Bypass competitor removal: 0
    2024-08-26T13:04:18.4925872Z INFO : Using CRT catalog file path: --
    2024-08-26T13:04:18.4925872Z INFO : Re-register installed endpoint with Central: 0
    2024-08-26T13:04:18.4935863Z INFO : Log messages between endpoint and Central: 0
    2024-08-26T13:04:18.4935863Z INFO : Log command-line passed to executables: 0
    2024-08-26T13:04:18.4935863Z INFO : Using custom server that hosts the installer stage2 filename: --
    2024-08-26T13:04:18.4935863Z INFO : Using cloud group: --
    2024-08-26T13:04:18.4935863Z INFO : Overriding computer name: --
    2024-08-26T13:04:18.4935863Z INFO : Overriding computer description: --
    2024-08-26T13:04:18.4946829Z INFO : Overriding domain name: --
    2024-08-26T13:04:18.4946829Z INFO : Language will be set to: --
    2024-08-26T13:04:18.4946829Z INFO : Using message relays: --
    2024-08-26T13:04:18.4946829Z INFO : Proxy address: --
    2024-08-26T13:04:18.4946829Z INFO : Proxy user name: --
    2024-08-26T13:04:18.4946829Z INFO : Using custom customer token: --
    2024-08-26T13:04:18.4946829Z INFO : Using specified products: --
    2024-08-26T13:04:18.4946829Z INFO : Using certificates from the program data folder: 0
    2024-08-26T13:04:18.4956148Z INFO : Setting non-persistent image: 0
    2024-08-26T13:04:18.4956148Z INFO : Setting gold image: 0
    2024-08-26T13:04:18.4956148Z INFO : MCS registration timeout for golden image: --
    2024-08-26T13:04:18.4956148Z INFO : Setting notification mode: 0
    2024-08-26T13:04:18.4966051Z INFO : Using custom customer ID: --
    2024-08-26T13:04:18.4966051Z INFO : Using specified user ID: --
    2024-08-26T13:04:18.4966051Z INFO : Using local install source: --
    2024-08-26T13:04:18.4966051Z INFO : ---
    2024-08-26T13:04:18.4995843Z INFO : Detected architecture: 3
    2024-08-26T13:04:18.4995843Z INFO : Using native program files for stage 2
    2024-08-26T13:04:18.5005880Z INFO : Target path: C:\\Program Files\\Sophos\\CloudInstaller
    2024-08-26T13:04:18.6096011Z INFO : About to delete: C:\\Program Files\\Sophos\\CloudInstaller
    2024-08-26T13:04:18.6096011Z INFO : Folder not present, nothing to delete
    2024-08-26T13:04:18.6106019Z INFO : Running on ARM64, requesting ARM64 Stage2
    2024-08-26T13:04:18.6135917Z INFO : Sending HTTP 'POST' request to: api/download/stage2-details/8c015571-1435-4ee9-921a-52580d1f29e7
    2024-08-26T13:04:18.6295864Z INFO : Did not discover an URL for a PAC file
    2024-08-26T13:04:18.6315932Z INFO : Attempting to connect using proxy '' of type 'Empty Proxy'.
    2024-08-26T13:04:18.6335930Z INFO : Set security protocol: 00000800
    2024-08-26T13:04:18.6335930Z INFO : Opening connection to api-cloudstation-eu-central-1.prod.hydra.sophos.com
    2024-08-26T13:04:18.6355854Z INFO : Request content size: 64
    2024-08-26T13:04:18.7315888Z INFO : Sending request
    2024-08-26T13:04:18.7325903Z INFO : Request sent
    2024-08-26T13:04:18.7715866Z INFO : Sending request
    2024-08-26T13:04:18.7715866Z INFO : Request sent
    2024-08-26T13:04:18.7736159Z INFO : Response status code: 200
    2024-08-26T13:04:18.7736159Z INFO : Response data size: 313
    2024-08-26T13:04:18.7746164Z INFO : trySendRequestThroughPotentialProxy returning response with status code: 200
    2024-08-26T13:04:18.7775860Z INFO : Parsing message received for Stage 2 filename: '{"downloads_server":"downloads.sophos.com","telemetry_server":"t1.sophosupd.com","diagnostics_server":"installer1.sophosupd.com","stage2_filename":"stage2-arm64-1.20.627.0-99c3b38508bb360b5992d7a3bb475252f2f3838079f3ebd971cb356a34d4c52f.tar.gz","mcs_server":"mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com"}'
    2024-08-26T13:04:18.7815884Z INFO : Sending HTTP 'GET' request to: full/central/windows/business/installer/stage2-arm64-1.20.627.0-99c3b38508bb360b5992d7a3bb475252f2f3838079f3ebd971cb356a34d4c52f.tar.gz
    2024-08-26T13:04:18.7835957Z INFO : Did not discover an URL for a PAC file
    2024-08-26T13:04:18.7835957Z INFO : Attempting to connect using proxy '' of type 'Empty Proxy'.
    2024-08-26T13:04:18.7855995Z INFO : Set security protocol: 00000800
    2024-08-26T13:04:18.7855995Z INFO : Opening connection to downloads.sophos.com
    2024-08-26T13:04:18.7855995Z INFO : Request content size: 0
    2024-08-26T13:04:18.8735908Z INFO : Sending request
    2024-08-26T13:04:18.8747205Z INFO : Request sent
    2024-08-26T13:04:19.7790626Z INFO : Response status code: 200
    2024-08-26T13:04:19.7799573Z INFO : Response data size: 2771743
    2024-08-26T13:04:19.7799573Z INFO : trySendRequestThroughPotentialProxy returning response with status code: 200
    2024-08-26T13:04:19.7849608Z INFO : Extracting files:
    2024-08-26T13:04:19.7859607Z INFO : integrity.dat
    2024-08-26T13:04:19.7889556Z INFO : manifest.dat
    2024-08-26T13:04:19.7949562Z INFO : SDDS3.dll
    2024-08-26T13:04:19.8359563Z INFO : SophosACSenabledTest.exe
    2024-08-26T13:04:19.8509705Z INFO : SophosSetup_Stage2.exe
    2024-08-26T13:04:19.9171083Z INFO : su-setup64.exe
    2024-08-26T13:04:19.9421108Z INFO : Management Certs/sophosca1.crl
    2024-08-26T13:04:19.9441117Z INFO : Management Certs/sophosca1.crt
    2024-08-26T13:04:19.9450361Z INFO : Management Certs/sophosca2.crl
    2024-08-26T13:04:19.9503595Z INFO : Management Certs/sophosca2.crt
    2024-08-26T13:04:19.9523608Z INFO : Management Certs/sophosca3.crl
    2024-08-26T13:04:19.9535340Z INFO : Management Certs/sophosca3.crt
    2024-08-26T13:04:19.9591220Z INFO : Management Certs/sophosca4.crl
    2024-08-26T13:04:19.9602752Z INFO : Management Certs/sophosca4.crt
    2024-08-26T13:04:19.9623306Z INFO : ManifestCerts/rootca384.crl
    2024-08-26T13:04:19.9681379Z INFO : ManifestCerts/rootca384.crt
    2024-08-26T13:04:20.0566852Z INFO : Running setup.
    2024-08-26T13:04:20.1563080Z INFO : Stage 2 command-line options:
    2024-08-26T13:04:20.1563080Z INFO : ---
    2024-08-26T13:04:20.1563080Z INFO : Parent PID: 7752
    2024-08-26T13:04:20.1573052Z INFO : MCS server: mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com
    2024-08-26T13:04:20.1573052Z INFO : Telemetry server: t1.sophosupd.com
    2024-08-26T13:04:20.1573052Z INFO : Diagnostics server: installer1.sophosupd.com
    2024-08-26T13:04:20.1573052Z INFO : Message relays: --
    2024-08-26T13:04:20.1573052Z INFO : Suppressing feedback: 0
    2024-08-26T13:04:20.1573052Z INFO : Dump feedback to disk: 0
    2024-08-26T13:04:20.1573052Z INFO : Setting non-persistent image: 0
    2024-08-26T13:04:20.1573052Z INFO : Setting gold image: 0
    2024-08-26T13:04:20.1573052Z INFO : MCS registration timeout for golden image: --
    2024-08-26T13:04:20.1573052Z INFO : Setting notification mode: 0
    2024-08-26T13:04:20.1583051Z INFO : Register only: 0
    2024-08-26T13:04:20.1583051Z INFO : Trail logging: 0
    2024-08-26T13:04:20.1583051Z INFO : Command-line logging: 0
    2024-08-26T13:04:20.1583051Z INFO : Bypassing competitor removal: 0
    2024-08-26T13:04:20.1583051Z INFO : CRT catalog: --
    2024-08-26T13:04:20.1583051Z INFO : Language: --
    2024-08-26T13:04:20.1583051Z INFO : Log files: C:\\ProgramData\\Sophos\\CloudInstaller\\Logs\\SophosCloudInstaller_20240826_130418.log
    2024-08-26T13:04:20.1583051Z INFO : Group: --
    2024-08-26T13:04:20.1583051Z INFO : Quiet: 0
    2024-08-26T13:04:20.1583051Z INFO : Bypass ownership check: 0
    2024-08-26T13:04:20.1583051Z INFO : Bypass ACS check: 0
    2024-08-26T13:04:20.1593336Z INFO : Virtual appliance: 0
    2024-08-26T13:04:20.1593336Z INFO : Proxy address: --
    2024-08-26T13:04:20.1593336Z INFO : Proxy user: --
    2024-08-26T13:04:20.1593336Z INFO : Overriding computer name: --
    2024-08-26T13:04:20.1593336Z INFO : Overriding computer description: --
    2024-08-26T13:04:20.1593336Z INFO : Overriding domain: --
    2024-08-26T13:04:20.1593336Z INFO : Disable proxy detection: 0
    2024-08-26T13:04:20.1593336Z INFO : Customer Token Specified: 8c015571-1435-4ee9-921a-52580d1f29e7
    2024-08-26T13:04:20.1593336Z INFO : Products: all
    2024-08-26T13:04:20.1593336Z INFO : Pipe write handle: 2028
    2024-08-26T13:04:20.1593336Z INFO : MCS Certificates Folder: 0
    2024-08-26T13:04:20.1593336Z INFO : MCS Customer Id: 381f7e60-63b2-6446-a913-f891789ece82
    2024-08-26T13:04:20.1593336Z INFO : User Id: --
    2024-08-26T13:04:20.1603266Z INFO : Local install source: --
    2024-08-26T13:04:20.1603266Z INFO : Partner Id: --
    2024-08-26T13:04:20.1603266Z INFO : Customer Estate Id: --
    2024-08-26T13:04:20.1603266Z INFO : ---
    2024-08-26T13:04:20.1623054Z INFO : User name: AdSwietoslawski
    2024-08-26T13:04:20.1633044Z INFO : NameDnsDomain: SOFTSYSTEM.DE\\AdSwietoslawski
    2024-08-26T13:04:20.1633044Z INFO : dnsDomain: SOFTSYSTEM.DE
    2024-08-26T13:04:20.2053860Z INFO : lpProfilePath: 
    2024-08-26T13:04:20.2084264Z INFO : User profile loaded
    2024-08-26T13:04:20.2084264Z INFO : Net API buffer freed
    2024-08-26T13:04:20.2084264Z INFO : Model::messageRelays value changed to be size: 0
    2024-08-26T13:04:20.2084264Z INFO : Model::group value changed to: 
    2024-08-26T13:04:20.2084264Z INFO : Model::parentPid value changed to: 7752
    2024-08-26T13:04:20.2094324Z INFO : Model::products changed to: all
    2024-08-26T13:04:20.2094324Z INFO : Model::customer token value changed to: 8c015571-1435-4ee9-921a-52580d1f29e7
    2024-08-26T13:04:20.2094324Z INFO : MCS Crts: C:\\Program Files\\Sophos\\CloudInstaller\\Management Certs\\sophosca1.crt,C:\\Program Files\\Sophos\\CloudInstaller\\Management Certs\\sophosca2.crt,C:\\Program Files\\Sophos\\CloudInstaller\\Management Certs\\sophosca3.crt,C:\\Program Files\\Sophos\\CloudInstaller\\Management Certs\\sophosca4.crt
    2024-08-26T13:04:20.2094324Z INFO : MCS CRLs: C:\\Program Files\\Sophos\\CloudInstaller\\Management Certs\\sophosca1.crl,C:\\Program Files\\Sophos\\CloudInstaller\\Management Certs\\sophosca2.crl,C:\\Program Files\\Sophos\\CloudInstaller\\Management Certs\\sophosca3.crl,C:\\Program Files\\Sophos\\CloudInstaller\\Management Certs\\sophosca4.crl
    2024-08-26T13:04:20.2094324Z INFO : Model:: MCS customer id value changed to: 381f7e60-63b2-6446-a913-f891789ece82
    2024-08-26T13:04:20.2094324Z INFO : Sophos Endpoint Defense is not installed
    2024-08-26T13:04:20.2094324Z INFO : Not tamper-protected by SED
    2024-08-26T13:04:20.2104325Z INFO : detectedMsiInstalledMcs.installed: 0
    2024-08-26T13:04:20.2104325Z INFO : Stage 1 version:1.20.627.0
    2024-08-26T13:04:20.2104325Z INFO : Stage 2 version:1.20.627.0
    2024-08-26T13:04:20.2104325Z INFO : OS version: 10.0.22631.
    2024-08-26T13:04:20.2104325Z INFO : Service pack: 0.0.
    2024-08-26T13:04:20.2115471Z INFO : System Language: 1031.
    2024-08-26T13:04:20.2115471Z INFO : User Language: 1031.
    2024-08-26T13:04:20.2115471Z INFO : 64 bit: no.
    2024-08-26T13:04:20.2144267Z INFO : Beginning command definition.
    2024-08-26T13:04:20.2144267Z INFO : Adding command to remove Sophos 'Image File Execution Options' keys.
    2024-08-26T13:04:20.2144267Z INFO : Adding command to wait for SAU update to complete.
    2024-08-26T13:04:20.2144267Z INFO : Adding competitor detection command.
    2024-08-26T13:04:20.2144267Z INFO : Adding command to register with Sophos cloud.
    2024-08-26T13:04:20.2154352Z INFO : Adding command to download product suite.
    2024-08-26T13:04:20.2174274Z INFO : Cache folder: C:\\ProgramData\\Sophos\\AutoUpdate\\cache
    2024-08-26T13:04:20.2174274Z INFO : No setup DLL found for component sau
    2024-08-26T13:04:20.2174274Z INFO : Adding command to uninstall Sophos AutoUpdate MSI
    2024-08-26T13:04:20.2174274Z INFO : Adding command to remove existing installation of Sophos AutoUpdate
    2024-08-26T13:04:20.2174274Z INFO : Adding command to allow tamper protected reinstalls.
    2024-08-26T13:04:20.2174274Z INFO : Adding commands to uninstall remaining existing products.
    2024-08-26T13:04:20.2174274Z INFO : Adding command to remove existing installation of Sophos System Protection
    2024-08-26T13:04:20.2174274Z INFO : Adding command to remove existing installation of Sophos Heartbeat
    2024-08-26T13:04:20.2174274Z INFO : Adding command to remove existing installation of Sophos Network Access Control
    2024-08-26T13:04:20.2174274Z INFO : Adding command to remove existing installation of Sophos Client Firewall
    2024-08-26T13:04:20.2184395Z INFO : Adding command to remove existing installation of Sophos Patch
    2024-08-26T13:04:20.2184395Z INFO : Adding command to remove existing installation of Sophos Clean
    2024-08-26T13:04:20.2184395Z INFO : Adding command to uninstall orphaned products.
    2024-08-26T13:04:20.2184395Z INFO : Adding command to prepare for installation.
    2024-08-26T13:04:20.2184395Z INFO : Adding command to install Sophos agent.
    2024-08-26T13:04:20.2184395Z INFO : Command definition complete.
    2024-08-26T13:04:20.2184395Z INFO : FindMainWindow: pid=7752
    2024-08-26T13:04:20.2194579Z INFO : Window is main control window of process
    2024-08-26T13:04:20.2194579Z INFO : ::EnumWindows stopped early; window found
    2024-08-26T13:04:20.2194579Z INFO : _bestHandle=0000000000050726
    2024-08-26T13:04:20.4484802Z INFO : Running System Property Check: VerifyTrust ...
    2024-08-26T13:04:20.4704780Z INFO : System Property Check: VerifyTrust - PASSED
    2024-08-26T13:04:20.5281542Z INFO : Running System Property Check: RequiredPrivilegesHeld ...
    2024-08-26T13:04:20.5292268Z INFO : All required privileges could be enabled
    2024-08-26T13:04:20.5292268Z INFO : System Property Check: RequiredPrivilegesHeld - PASSED
    2024-08-26T13:04:20.5933067Z INFO : Running System Property Check: TrustedHmpaFolder ...
    2024-08-26T13:04:20.5933067Z INFO : HMPA folder is trusted
    2024-08-26T13:04:20.5933067Z INFO : System Property Check: TrustedHmpaFolder - PASSED
    2024-08-26T13:04:20.6540038Z INFO : Running System Property Check: HostnameLength ...
    2024-08-26T13:04:20.6550036Z INFO : Initialized Winsock subsystem
    2024-08-26T13:04:20.6580046Z INFO : Valid hostname length
    2024-08-26T13:04:20.6590059Z INFO : System Property Check: HostnameLength - PASSED
    2024-08-26T13:04:20.7144049Z INFO : Running System Property Check: GroupNameLength ...
    2024-08-26T13:04:20.7144049Z INFO : System Property Check: GroupNameLength - PASSED
    2024-08-26T13:04:20.7774855Z INFO : Running System Property Check: JunctionPointsCheck ...
    2024-08-26T13:04:20.7814771Z INFO : Scanned 79 Sophos paths for junction points
    2024-08-26T13:04:20.7814771Z INFO : System Property Check: JunctionPointsCheck - PASSED
    2024-08-26T13:04:20.8400684Z INFO : Running System Property Check: PendingReboots ...
    2024-08-26T13:04:20.8400684Z INFO : Found pending file rename operations in the registry
    2024-08-26T13:04:20.8400684Z WARNING : System Property Check: PendingReboots recommended - FAILED
    2024-08-26T13:04:20.9017253Z INFO : Running System Property Check: PrimaryDriveSpace ...
    2024-08-26T13:04:20.9027753Z INFO : Enough space: 23226 Mb
    2024-08-26T13:04:20.9027753Z INFO : System Property Check: PrimaryDriveSpace - PASSED
    2024-08-26T13:04:20.9640134Z INFO : Running System Property Check: MsXml ...
    2024-08-26T13:04:20.9700171Z INFO : System Property Check: MsXml - PASSED
    2024-08-26T13:04:21.0289517Z INFO : Running System Property Check: NotFirewall ...
    2024-08-26T13:04:21.0289517Z INFO : System Property Check: NotFirewall - PASSED
    2024-08-26T13:04:21.0929304Z INFO : Running System Property Check: NotHitmanProAlertIncompatible ...
    2024-08-26T13:04:21.0929304Z INFO : No HitmanPro.Alert Installed
    2024-08-26T13:04:21.0929304Z INFO : System Property Check: NotHitmanProAlertIncompatible - PASSED
    2024-08-26T13:04:21.1541955Z INFO : Running System Property Check: NotInvincea ...
    2024-08-26T13:04:21.1541955Z INFO : System Property Check: NotInvincea - PASSED
    2024-08-26T13:04:21.2179604Z INFO : Running System Property Check: NotMessageRelay ...
    2024-08-26T13:04:21.2179604Z INFO : RMS is not installed on the endpoint
    2024-08-26T13:04:21.2179604Z INFO : System Property Check: NotMessageRelay - PASSED
    2024-08-26T13:04:21.2794062Z INFO : Running System Property Check: NotNac ...
    2024-08-26T13:04:21.2794062Z INFO : System Property Check: NotNac - PASSED
    2024-08-26T13:04:21.3444411Z INFO : Running System Property Check: NotPatch ...
    2024-08-26T13:04:21.3454277Z INFO : System Property Check: NotPatch - PASSED
    2024-08-26T13:04:21.4061280Z INFO : Running System Property Check: NotPureMessageDomino ...
    2024-08-26T13:04:21.4061280Z INFO : System Property Check: NotPureMessageDomino - PASSED
    2024-08-26T13:04:21.4691036Z INFO : Running System Property Check: NotPureMessageExchangeWithAntiSpam ...
    2024-08-26T13:04:21.4691036Z INFO : System Property Check: NotPureMessageExchangeWithAntiSpam - PASSED
    2024-08-26T13:04:21.5330550Z INFO : Running System Property Check: NotSav ...
    2024-08-26T13:04:21.5330550Z INFO : System Property Check: NotSav - PASSED
    2024-08-26T13:04:21.5944979Z INFO : Running System Property Check: NotSharePoint ...
    2024-08-26T13:04:21.5944979Z INFO : System Property Check: NotSharePoint - PASSED
    2024-08-26T13:04:21.6590950Z INFO : Running System Property Check: NotSecServer ...
    2024-08-26T13:04:21.6600125Z INFO : System Property Check: NotSecServer - PASSED
    2024-08-26T13:04:21.7214195Z INFO : Running System Property Check: NotSum ...
    2024-08-26T13:04:21.7214195Z INFO : System Property Check: NotSum - PASSED
    2024-08-26T13:04:21.7840131Z INFO : Running System Property Check: NotBlockedByTamperProtection ...
    2024-08-26T13:04:21.7840131Z INFO : Not tamper protected
    2024-08-26T13:04:21.7840131Z INFO : System Property Check: NotBlockedByTamperProtection - PASSED
    2024-08-26T13:04:21.8473170Z INFO : Running System Property Check: RAMSize ...
    2024-08-26T13:04:21.8473170Z INFO : System Property Check: RAMSize - PASSED
    2024-08-26T13:04:21.9095927Z INFO : Running System Property Check: CpuCoreCount ...
    2024-08-26T13:04:21.9095927Z INFO : Logical processor core count: 12
    2024-08-26T13:04:21.9095927Z INFO : System Property Check: CpuCoreCount - PASSED
    2024-08-26T13:04:21.9729525Z INFO : Running System Property Check: SupportedArchitecture ...
    2024-08-26T13:04:21.9729525Z INFO : Running on ARM64
    2024-08-26T13:04:21.9729525Z INFO : System Property Check: SupportedArchitecture - PASSED
    2024-08-26T13:04:22.0341126Z INFO : Running System Property Check: SupportedOS ...
    2024-08-26T13:04:22.0341126Z INFO : Running on ARM64 workstation.
    2024-08-26T13:04:22.0341126Z INFO : System Property Check: SupportedOS - PASSED
    2024-08-26T13:04:22.0975546Z INFO : Running System Property Check: SupportedPatches ...
    2024-08-26T13:04:22.0975546Z INFO : System Property Check: SupportedPatches - PASSED
    2024-08-26T13:04:22.1590403Z INFO : Running System Property Check: AzureCodeSigning ...
    2024-08-26T13:04:22.1990471Z INFO : ACS supported
    2024-08-26T13:04:22.1990471Z INFO : System Property Check: AzureCodeSigning - PASSED
    2024-08-26T13:04:22.2530929Z INFO : Running System Property Check: DotNetFramework ...
    2024-08-26T13:04:22.2530929Z INFO : Supported .NET version is present
    2024-08-26T13:04:22.2530929Z INFO : System Property Check: DotNetFramework - PASSED
    2024-08-26T13:04:22.3152992Z INFO : Running System Property Check: ValidTempDirectory ...
    2024-08-26T13:04:22.3152992Z INFO : Temp folder exists.
    2024-08-26T13:04:22.3152992Z INFO : System Property Check: ValidTempDirectory - PASSED
    2024-08-26T13:04:22.3762192Z INFO : Running System Property Check: ValidLocalInstallSourceDirectory ...
    2024-08-26T13:04:22.3762192Z INFO : No local install source folder to validate.
    2024-08-26T13:04:22.3762192Z INFO : System Property Check: ValidLocalInstallSourceDirectory - PASSED
    2024-08-26T13:04:22.4391152Z INFO : Running System Property Check: ValidServer ...
    2024-08-26T13:04:22.4391152Z INFO : System Property Check: ValidServer - PASSED
    2024-08-26T13:04:22.5027727Z INFO : Running System Property Check: ValidDeploymentInfo ...
    2024-08-26T13:04:22.5027727Z INFO : Current Time: 2024-08-26T13:04:22.502000
    2024-08-26T13:04:22.5048308Z INFO : This computer is part of the domain SOFTSYSTEM
    2024-08-26T13:04:22.5048308Z INFO : Domain Name: SOFTSYSTEM
    2024-08-26T13:04:22.5048308Z INFO : Computer Name: NB-E02-WIN11
    2024-08-26T13:04:22.5048308Z INFO : Computer Description is not available. 
    2024-08-26T13:04:22.5048308Z INFO : Operating system friendly name: Windows 11 Pro 
    2024-08-26T13:04:22.5048308Z INFO : Operating system for status: WIN11
    2024-08-26T13:04:22.5048308Z INFO : ProductType: 48
    2024-08-26T13:04:22.5098237Z INFO : Session user: SOFTSYSTEM\\AdSwietoslawski
    2024-08-26T13:04:22.5098237Z INFO : Last logged on user: SOFTSYSTEM\\AdSwietoslawski
    2024-08-26T13:04:22.5098237Z INFO : User principal name: AdSwietoslawski@SoftSystem.de
    2024-08-26T13:04:22.5108232Z INFO : Fully Qualified Domain Name: NB-E02-WIN11.SoftSystem.de
    2024-08-26T13:04:22.5108232Z INFO : Processor architecture: arm64
    2024-08-26T13:04:22.5108232Z INFO : OS Major Version: 11 and OS Minor Version: 0
    2024-08-26T13:04:22.5108232Z INFO : Friendly OS Name: WIN11
    2024-08-26T13:04:22.5108232Z INFO : Is server?: 0
    2024-08-26T13:04:22.5118285Z INFO : Sending HTTP 'POST' request to: sophos/management/ep/install/deployment-info/3
    2024-08-26T13:04:22.5138278Z INFO : Did not discover an URL for a PAC file
    2024-08-26T13:04:22.5148235Z INFO : Attempting to connect using proxy '' of type 'Empty Proxy'.
    2024-08-26T13:04:22.5148235Z INFO : Set security protocol: 00000800
    2024-08-26T13:04:22.5148235Z INFO : Opening connection to mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com
    2024-08-26T13:04:22.5148235Z INFO : Sending request for connection confirmation through potential proxy
    2024-08-26T13:04:22.5148235Z INFO : Request content size: 0
    2024-08-26T13:04:22.6006204Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
    2024-08-26T13:04:22.6016187Z INFO : Subject certificate failed validation against root CA: SophosCA1
    2024-08-26T13:04:22.6026199Z INFO : Subject certificate failed validation against root CA: SophosCA2
    2024-08-26T13:04:22.6026199Z INFO : Certificate check succeeded
    2024-08-26T13:04:22.6036181Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
    2024-08-26T13:04:22.6143980Z INFO : Response status code: 200
    2024-08-26T13:04:22.6153922Z INFO : Response data size: 168
    2024-08-26T13:04:22.6153922Z INFO : trySendRequestThroughPotentialProxy returning response with status code: 200
    2024-08-26T13:04:22.6153922Z INFO : Request content size: 1619
    2024-08-26T13:04:22.6153922Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
    2024-08-26T13:04:22.6163927Z INFO : Subject certificate failed validation against root CA: SophosCA1
    2024-08-26T13:04:22.6163927Z INFO : Subject certificate failed validation against root CA: SophosCA2
    2024-08-26T13:04:22.6173906Z INFO : Certificate check succeeded
    2024-08-26T13:04:22.6173906Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
    2024-08-26T13:04:22.6776525Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
    2024-08-26T13:04:22.6786819Z INFO : Subject certificate failed validation against root CA: SophosCA1
    2024-08-26T13:04:22.6786819Z INFO : Subject certificate failed validation against root CA: SophosCA2
    2024-08-26T13:04:22.6797256Z INFO : Certificate check succeeded
    2024-08-26T13:04:22.6797256Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
    2024-08-26T13:04:22.6806893Z INFO : Response status code: 200
    2024-08-26T13:04:22.6806893Z INFO : Response data size: 279
    2024-08-26T13:04:22.6806893Z INFO : Parsing message received for deployment token: {"dciFileName":"41aea06e7cf0d70e17fc260874fb911c","products":[{"product":"DEVICE_ENCRYPTION","supported":true,"reasons":[]},{"product":"INTERCEPT_ADVANCED_MDR","supported":true,"reasons":[]}],"registrationToken":"1b945a0248788f15d68b15a6ca350f9cf2ce27298ac3ac66149c629c0d15aac0"}
    2024-08-26T13:04:22.6806893Z INFO : Model::token value changed to: 1b945a0248788f15d68b15a6ca350f9cf2ce27298ac3ac66149c629c0d15aac0
    2024-08-26T13:04:22.6806893Z INFO : Licenses available: DEVICE_ENCRYPTION INTERCEPT_ADVANCED_MDR 
    2024-08-26T13:04:22.8637592Z INFO : Running System Property Check: InstallationInProgress ...
    2024-08-26T13:04:22.8637592Z INFO : System Property Check: InstallationInProgress - PASSED
    2024-08-26T13:04:22.9286728Z INFO : Running System Property Check: SafeGuardEncryption ...
    2024-08-26T13:04:22.9286728Z INFO : Entered installedProductCode, upgradeCode={BA2F47D3-1C17-40E7-8DE7-1CD733442B6C}
    2024-08-26T13:04:22.9286728Z INFO : Product is not installed
    2024-08-26T13:04:22.9286728Z INFO : licensesContainFeature(DEVICE_ENCRYPTION): true
    2024-08-26T13:04:22.9286728Z INFO : System Property Check: SafeGuardEncryption - PASSED
    2024-08-26T13:04:35.7990159Z INFO : Starting installation process.
    2024-08-26T13:04:35.8000162Z INFO : About to execute command: CleanSophosIfeoKeysCommand
    2024-08-26T13:04:35.8040178Z INFO : Command 'CleanSophosIfeoKeysCommand' completed with success with reboot code '0' and error message ''.
    2024-08-26T13:04:35.8040178Z INFO : About to execute command: WaitForSauUpdateCommand
    2024-08-26T13:04:35.8040178Z INFO : Waiting for operation to succeed within 900000ms.
    2024-08-26T13:04:35.8040178Z INFO : AutoUpdate folder: C:\\Program Files\\Sophos\\AutoUpdate
    2024-08-26T13:04:35.8050116Z INFO : Cache folder: C:\\ProgramData\\Sophos\\AutoUpdate\\cache
    2024-08-26T13:04:35.8050116Z INFO : Cache folder: C:\\ProgramData\\Sophos\\AutoUpdate\\cache
    2024-08-26T13:04:35.8050116Z INFO : SAU not updating - continuing with installation
    2024-08-26T13:04:35.8050116Z INFO : Data folder: C:\\ProgramData\\Sophos\\AutoUpdate\\data
    2024-08-26T13:04:35.8050116Z INFO : Command 'WaitForSauUpdateCommand' completed with success with reboot code '0' and error message ''.
    2024-08-26T13:04:35.8050116Z INFO : About to execute command: CompetitorDetector
    2024-08-26T13:04:35.8110143Z INFO : Command 'CompetitorDetector' completed with success with reboot code '0' and error message ''.
    2024-08-26T13:04:35.8110143Z INFO : About to execute command: Register
    2024-08-26T13:04:35.8110143Z INFO : Ensuring any MCS client service is stopped to prevent race for policy retrieval
    2024-08-26T13:04:35.8120141Z INFO : Sending HTTP 'POST' request to: sophos/management/ep/install/register
    2024-08-26T13:04:35.8130261Z INFO : Did not discover an URL for a PAC file
    2024-08-26T13:04:35.8130261Z INFO : Attempting to connect using proxy '' of type 'Empty Proxy'.
    2024-08-26T13:04:35.8140157Z INFO : Set security protocol: 00000800
    2024-08-26T13:04:35.8140157Z INFO : Opening connection to mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com
    2024-08-26T13:04:35.8140157Z INFO : Sending request for connection confirmation through potential proxy
    2024-08-26T13:04:35.8150145Z INFO : Request content size: 0
    2024-08-26T13:04:35.8150145Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
    2024-08-26T13:04:35.8160118Z INFO : Subject certificate failed validation against root CA: SophosCA1
    2024-08-26T13:04:35.8160118Z INFO : Subject certificate failed validation against root CA: SophosCA2
    2024-08-26T13:04:35.8170491Z INFO : Certificate check succeeded
    2024-08-26T13:04:35.8180398Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
    2024-08-26T13:04:35.8288797Z INFO : Response status code: 200
    2024-08-26T13:04:35.8288797Z INFO : Response data size: 168
    2024-08-26T13:04:35.8288797Z INFO : trySendRequestThroughPotentialProxy returning response with status code: 200
    2024-08-26T13:04:35.8288797Z INFO : Request content size: 1619
    2024-08-26T13:04:35.8299693Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
    2024-08-26T13:04:35.8299693Z INFO : Subject certificate failed validation against root CA: SophosCA1
    2024-08-26T13:04:35.8309447Z INFO : Subject certificate failed validation against root CA: SophosCA2
    2024-08-26T13:04:35.8309447Z INFO : Certificate check succeeded
    2024-08-26T13:04:35.8319573Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
    2024-08-26T13:04:36.2549208Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
    2024-08-26T13:04:36.2559877Z INFO : Subject certificate failed validation against root CA: SophosCA1
    2024-08-26T13:04:36.2569853Z INFO : Subject certificate failed validation against root CA: SophosCA2
    2024-08-26T13:04:36.2579838Z INFO : Certificate check succeeded
    2024-08-26T13:04:36.2579838Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
    2024-08-26T13:04:36.2579838Z INFO : Response status code: 200
    2024-08-26T13:04:36.2579838Z INFO : Response data size: 72
    2024-08-26T13:04:36.2579838Z INFO : Retrieved endpoint id: 30ac8164-83eb-a4aa-781a-cbf9ba4206c2
    2024-08-26T13:04:37.2738890Z INFO : Sending HTTP 'POST' request to: sophos/management/ep/install/authenticate/endpoint/30ac8164-83eb-a4aa-781a-cbf9ba4206c2/role/endpoint
    2024-08-26T13:04:37.2738890Z INFO : Request content size: 0
    2024-08-26T13:04:37.2758893Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
    2024-08-26T13:04:37.2768889Z INFO : Subject certificate failed validation against root CA: SophosCA1
    2024-08-26T13:04:37.2768889Z INFO : Subject certificate failed validation against root CA: SophosCA2
    2024-08-26T13:04:37.2778956Z INFO : Certificate check succeeded
    2024-08-26T13:04:37.2788844Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
    2024-08-26T13:04:37.4187419Z INFO : Response status code: 200
    2024-08-26T13:04:37.4187419Z INFO : Response data size: 1038
    2024-08-26T13:04:37.4187419Z INFO : Retrieved mcs auth: tenant_id=83f1e706-362b-4664-9a31-8f1987e9ec28 device_id=03ca1846-38be-4aaa-87a1-bc9fab24602c
    2024-08-26T13:04:37.4197840Z INFO : MCS Auth token features: f_endpoint_updating
    2024-08-26T13:04:37.4197840Z INFO : MCS Auth token features: f_ep_scheduledquery
    2024-08-26T13:04:37.4197840Z INFO : Sending HTTP 'GET' request to: sophos/management/ep/install/flags/endpoint/30ac8164-83eb-a4aa-781a-cbf9ba4206c2
    2024-08-26T13:04:37.4197840Z INFO : Request content size: 0
    2024-08-26T13:04:37.4208631Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
    2024-08-26T13:04:37.4217851Z INFO : Subject certificate failed validation against root CA: SophosCA1
    2024-08-26T13:04:37.4217851Z INFO : Subject certificate failed validation against root CA: SophosCA2
    2024-08-26T13:04:37.4227851Z INFO : Certificate check succeeded
    2024-08-26T13:04:37.4237956Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
    2024-08-26T13:04:37.5046385Z INFO : Response status code: 200
    2024-08-26T13:04:37.5046385Z INFO : Response data size: 6607
    2024-08-26T13:04:37.5046385Z INFO : Loaded 177 endpoint flags
    2024-08-26T13:04:37.5046385Z INFO : Fetching policy through MCS v1 API
    2024-08-26T13:04:37.5046385Z INFO : Sending HTTP 'PUT' request to: sophos/management/ep/install/statuses/endpoint/30ac8164-83eb-a4aa-781a-cbf9ba4206c2
    2024-08-26T13:04:37.5056346Z INFO : Request content size: 990
    2024-08-26T13:04:37.5056346Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
    2024-08-26T13:04:37.5066374Z INFO : Subject certificate failed validation against root CA: SophosCA1
    2024-08-26T13:04:37.5076386Z INFO : Subject certificate failed validation against root CA: SophosCA2
    2024-08-26T13:04:37.5076386Z INFO : Certificate check succeeded
    2024-08-26T13:04:37.5086413Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
    2024-08-26T13:04:37.6894287Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
    2024-08-26T13:04:37.6904566Z INFO : Subject certificate failed validation against root CA: SophosCA1
    2024-08-26T13:04:37.6914570Z INFO : Subject certificate failed validation against root CA: SophosCA2
    2024-08-26T13:04:37.6924572Z INFO : Certificate check succeeded
    2024-08-26T13:04:37.6924572Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
    2024-08-26T13:04:37.6924572Z INFO : Response status code: 200
    2024-08-26T13:04:37.6924572Z INFO : Response data size: 0
    2024-08-26T13:04:37.6924572Z INFO : Attempt to retrieve policy.
    2024-08-26T13:04:37.6924572Z INFO : Sending HTTP 'GET' request to: sophos/management/ep/install/commands/applications/APPSPROXY;ALC/endpoint/30ac8164-83eb-a4aa-781a-cbf9ba4206c2
    2024-08-26T13:04:37.6934535Z INFO : Request content size: 0
    2024-08-26T13:04:37.6934535Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
    2024-08-26T13:04:37.6944549Z INFO : Subject certificate failed validation against root CA: SophosCA1
    2024-08-26T13:04:37.6944549Z INFO : Subject certificate failed validation against root CA: SophosCA2
    2024-08-26T13:04:37.6954541Z INFO : Certificate check succeeded
    2024-08-26T13:04:37.6964594Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
    2024-08-26T13:04:37.7099944Z INFO : Response status code: 200
    2024-08-26T13:04:37.7099944Z INFO : Response data size: 790
    2024-08-26T13:04:37.7099944Z INFO : Successfully retrieved policy with policyId='c3b010e2dcf0808c02d4fcd8fbd783b295a0bf8beb70e16f1ef3060d63debd7a'.
    2024-08-26T13:04:37.7110231Z INFO : Sending HTTP 'DELETE' request to: sophos/management/ep/install/commands/endpoint/30ac8164-83eb-a4aa-781a-cbf9ba4206c2/43
    2024-08-26T13:04:37.7110231Z INFO : Request content size: 0
    2024-08-26T13:04:37.7110231Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
    2024-08-26T13:04:37.7120364Z INFO : Subject certificate failed validation against root CA: SophosCA1
    2024-08-26T13:04:37.7130497Z INFO : Subject certificate failed validation against root CA: SophosCA2
    2024-08-26T13:04:37.7140206Z INFO : Certificate check succeeded
    2024-08-26T13:04:37.7150228Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
    2024-08-26T13:04:37.7619106Z INFO : Response status code: 200
    2024-08-26T13:04:37.7619106Z INFO : Response data size: 0
    2024-08-26T13:04:37.7629319Z INFO : Sending HTTP 'GET' request to: sophos/management/ep/install/policy/application/ALC/c3b010e2dcf0808c02d4fcd8fbd783b295a0bf8beb70e16f1ef3060d63debd7a
    2024-08-26T13:04:37.7629319Z INFO : Request content size: 0
    2024-08-26T13:04:37.7639614Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
    2024-08-26T13:04:37.7649306Z INFO : Subject certificate failed validation against root CA: SophosCA1
    2024-08-26T13:04:37.7649306Z INFO : Subject certificate failed validation against root CA: SophosCA2
    2024-08-26T13:04:37.7659385Z INFO : Certificate check succeeded
    2024-08-26T13:04:37.7669408Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
    2024-08-26T13:04:37.8429289Z INFO : Response status code: 200
    2024-08-26T13:04:37.8429289Z INFO : Response data size: 3541
    2024-08-26T13:04:37.8429289Z INFO : Subscription id: Base, rigidname: WindowsCloudNextGen, baseversion: 11, tag: RECOMMENDED, fixedversion: 
    2024-08-26T13:04:37.8439425Z INFO : Subscription id: Clean, rigidname: WindowsCloudClean, baseversion: 1, tag: RECOMMENDED, fixedversion: 
    2024-08-26T13:04:37.8439425Z INFO : Subscription id: CloudAV, rigidname: WindowsCloudAV, baseversion: 11, tag: RECOMMENDED, fixedversion: 
    2024-08-26T13:04:37.8439425Z INFO : Subscription id: Encryption, rigidname: WindowsCloudEncryption, baseversion: 1, tag: RECOMMENDED, fixedversion: 
    2024-08-26T13:04:37.8439425Z INFO : Subscription id: HitmanProAlert, rigidname: WindowsCloudHitmanProAlert, baseversion: 1, tag: RECOMMENDED, fixedversion: 
    2024-08-26T13:04:37.8439425Z INFO : Subscription id: MDR, rigidname: WindowsCloudMDR, baseversion: , tag: RECOMMENDED, fixedversion: 
    2024-08-26T13:04:37.8439425Z INFO : Fixed version token: 1fa7e4d2-a338-53fe-8573-6f03afbf8c90, name: FTS 2023.2.1.31-MR3
    2024-08-26T13:04:37.8449506Z INFO : Feature: APPCNTRL
    2024-08-26T13:04:37.8449506Z INFO : Feature: AV
    2024-08-26T13:04:37.8449506Z INFO : Feature: CLEAN
    2024-08-26T13:04:37.8449506Z INFO : Feature: CORE
    2024-08-26T13:04:37.8449506Z INFO : Feature: DLP
    2024-08-26T13:04:37.8459366Z INFO : Feature: DVCCNTRL
    2024-08-26T13:04:37.8459366Z INFO : Feature: EFW
    2024-08-26T13:04:37.8459366Z INFO : Feature: HBT
    2024-08-26T13:04:37.8459366Z INFO : Feature: NTP
    2024-08-26T13:04:37.8459366Z INFO : Feature: SAV
    2024-08-26T13:04:37.8469271Z INFO : Feature: SDU
    2024-08-26T13:04:37.8469271Z INFO : Feature: WEBCNTRL
    2024-08-26T13:04:37.8469271Z INFO : Feature: XPD
    2024-08-26T13:04:37.8469271Z INFO : Server for 'sus': sus.sophosupd.com
    2024-08-26T13:04:37.8469271Z INFO : Server for 'content_server': sdds3.sophosupd.com
    2024-08-26T13:04:37.8469271Z INFO : Server for 'content_server': sdds3.sophosupd.net
    2024-08-26T13:04:37.8469271Z INFO : Server for 'telemetry': t1.sophosupd.com
    2024-08-26T13:04:37.8469271Z INFO : Server for 'feedback': sdu-feedback.sophos.com
    2024-08-26T13:04:37.8479435Z INFO : Server for 'repairkit': sdu-auto-upload.sophosupd.com
    2024-08-26T13:04:37.8479435Z INFO : Restarting MCS Client service if stopped
    2024-08-26T13:04:37.8479435Z INFO : Command 'Register' completed with success with reboot code '0' and error message ''.
    2024-08-26T13:04:37.8479435Z INFO : About to execute command: Download
    2024-08-26T13:04:37.8479435Z INFO : Update Cache Cert Path folder: C:\\ProgramData\\Sophos\\Certificates\\AutoUpdate\\Cache
    2024-08-26T13:04:37.8489311Z INFO : CRT required: adding 'CRT' feature
    2024-08-26T13:04:37.9009231Z INFO : Using SDDS3 delta version: 3
    2024-08-26T13:04:37.9009231Z INFO : SUS service request body: {"schema_version":"1","product":"winep","server":false,"platform_token":"WIN_11_ARM64","platform_release":"2009 22631.4037","os_version":"11.0","subscriptions":[{"id":"WindowsCloudAV","tag":"RECOMMENDED"},{"id":"WindowsCloudClean","tag":"RECOMMENDED"},{"id":"WindowsCloudEncryption","tag":"RECOMMENDED"},{"id":"WindowsCloudHitmanProAlert","tag":"RECOMMENDED"},{"id":"WindowsCloudMDR","tag":"RECOMMENDED"},{"id":"WindowsCloudNextGen","tag":"RECOMMENDED"}],"fixed_version_token":"1fa7e4d2-a338-53fe-8573-6f03afbf8c90"}
    2024-08-26T13:04:37.9009231Z INFO : No manually configured proxy
    2024-08-26T13:04:37.9019238Z INFO : WinHttp default proxy not set
    2024-08-26T13:04:37.9029242Z INFO : WinHttp discovered proxies not found
    2024-08-26T13:04:37.9029242Z INFO : Trying update service url https://sus.sophosupd.com/v3/83f1e706-362b-4664-9a31-8f1987e9ec28/03ca1846-38be-4aaa-87a1-bc9fab24602c with proxy: <direct; no proxy>
    2024-08-26T13:04:38.0542010Z INFO : 200 from https://sus.sophosupd.com/v3/83f1e706-362b-4664-9a31-8f1987e9ec28/03ca1846-38be-4aaa-87a1-bc9fab24602c with proxy: <direct; no proxy> (peer address 54.170.4.213)
    2024-08-26T13:04:38.0551797Z INFO : SUS response body: {"error": "200 OK", "reason": "Presented fixed version token is EOL", "code": "FIXED_VERSION_TOKEN_EOL"}
    2024-08-26T13:04:38.0551797Z INFO : SUS response body size: 104
    2024-08-26T13:04:38.0581733Z INFO : Sophos Update Service response: error='200 OK' reason='Presented fixed version token is EOL' code='FIXED_VERSION_TOKEN_EOL'
    2024-08-26T13:04:38.0581733Z ERROR : Error: Sophos Update Service failed to provide suites
    2024-08-26T13:04:38.0581733Z ERROR : DownloadCommand::onRun() failed with std::exception: SDDS3 sync failed
    2024-08-26T13:04:38.0581733Z INFO : Command 'Download' completed with failure with reboot code '0' and error message 'Software konnte nicht heruntergeladen werden'.
    2024-08-26T13:04:38.0581733Z ERROR : Installation failed.
    2024-08-26T13:04:38.0591702Z INFO : Sending HTTP 'POST' request to: sophos/management/ep/install/events/endpoint/30ac8164-83eb-a4aa-781a-cbf9ba4206c2
    2024-08-26T13:04:38.0601713Z INFO : Did not discover an URL for a PAC file
    2024-08-26T13:04:38.0601713Z INFO : Attempting to connect using proxy '' of type 'Empty Proxy'.
    2024-08-26T13:04:38.0611737Z INFO : Set security protocol: 00000800
    2024-08-26T13:04:38.0611737Z INFO : Opening connection to mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com
    2024-08-26T13:04:38.0611737Z INFO : Sending request for connection confirmation through potential proxy
    2024-08-26T13:04:38.0611737Z INFO : Request content size: 0
    2024-08-26T13:04:38.0621755Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
    2024-08-26T13:04:38.0621755Z INFO : Subject certificate failed validation against root CA: SophosCA1
    2024-08-26T13:04:38.0631712Z INFO : Subject certificate failed validation against root CA: SophosCA2
    2024-08-26T13:04:38.0642391Z INFO : Certificate check succeeded
    2024-08-26T13:04:38.0642391Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
    2024-08-26T13:04:38.0740063Z INFO : Response status code: 200
    2024-08-26T13:04:38.0740063Z INFO : Response data size: 168
    2024-08-26T13:04:38.0740063Z INFO : trySendRequestThroughPotentialProxy returning response with status code: 200
    2024-08-26T13:04:38.0740063Z INFO : Request content size: 973
    2024-08-26T13:04:38.0751150Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
    2024-08-26T13:04:38.0760752Z INFO : Subject certificate failed validation against root CA: SophosCA1
    2024-08-26T13:04:38.0760752Z INFO : Subject certificate failed validation against root CA: SophosCA2
    2024-08-26T13:04:38.0760752Z INFO : Certificate check succeeded
    2024-08-26T13:04:38.0771260Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
    2024-08-26T13:04:38.1318851Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
    2024-08-26T13:04:38.1329129Z INFO : Subject certificate failed validation against root CA: SophosCA1
    2024-08-26T13:04:38.1329129Z INFO : Subject certificate failed validation against root CA: SophosCA2
    2024-08-26T13:04:38.1329129Z INFO : Certificate check succeeded
    2024-08-26T13:04:38.1339310Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
    2024-08-26T13:04:38.1339310Z INFO : Response status code: 200
    2024-08-26T13:04:38.1339310Z INFO : Response data size: 0
    2024-08-26T13:05:54.6808566Z INFO : Data folder: C:\\ProgramData\\Sophos\\AutoUpdate\\data
    2024-08-26T13:05:54.6958521Z INFO : Sending HTTP 'PUT' request to: prod/2024-08-26T13:05:54Z-2024-08-26T13:05:54Z-13966ac3-46f4-57d7-bba6-efbb7735308e.json
    2024-08-26T13:05:54.6998503Z INFO : Did not discover an URL for a PAC file
    2024-08-26T13:05:54.6998503Z INFO : Attempting to connect using proxy '' of type 'Empty Proxy'.
    2024-08-26T13:05:54.7008521Z INFO : Set security protocol: 00000800
    2024-08-26T13:05:54.7008521Z INFO : Opening connection to t1.sophosupd.com
    2024-08-26T13:05:54.7019136Z INFO : Request content size: 4207
    2024-08-26T13:05:54.7946905Z INFO : Sending request
    2024-08-26T13:05:54.7946905Z INFO : Request sent
    2024-08-26T13:05:54.8997225Z INFO : Sending request
    2024-08-26T13:05:54.8997225Z INFO : Request sent
    2024-08-26T13:05:54.8997225Z INFO : Response status code: 200
    2024-08-26T13:05:54.9007812Z INFO : Response data size: 0
    2024-08-26T13:05:54.9007812Z INFO : trySendRequestThroughPotentialProxy returning response with status code: 200
    2024-08-26T13:05:54.9007812Z INFO : Telemetry Response: 
    2024-08-26T13:05:54.9007812Z INFO : Install result: Failed
    2024-08-26T13:05:54.9027777Z INFO : User profile unloaded
    2024-08-26T13:05:54.9117770Z INFO : Cleaning up extracted files
    2024-08-26T13:05:54.9167775Z ERROR : Error downloading/running stage 2: Setup program failed with code: 1
    2024-08-26T13:05:54.9197764Z ERROR : Exception: Setup program failed with code: 1
    

  • Hi  ,

    Good day!

    Thanks for reaching out to the Sophos Community Forum. 

    With regards the error in the log provided, kindly check the below steps that might resolve the issue.

    On central, Go to My Products > Endpoint > Policies > click on the Update Management policy.
    Open the policy's Settings tab.
    Under the Windows drop-down box, check if it is in the recommended version or if it is in the expired version.
    If the package there is expired, select recommended one and save the policy and then download a new installer and install on the machine and check if that resolves the issue.

    Refer the below screenshot:

    Yogalakshmi
    Sophos Digital Support
    Are you a Sophos Partner? | Product Documentation | @SophosSupport | Sign up for SMS Alerts
    If a post solves your question, please use the "Verify Answer" button.
    The New Home of Sophos Support Videos!  Visit Sophos Techvids
  • Hello,  ,

    In addition to Yogalakshmi's reply. 

    I have gone through the logs. I can see the error as:

    2024-07-23T07:16:16.8086730Z ERROR: Error downloading/running stage 2: Setup program failed with code: 1
    2024-07-23T07:16:16.8106735Z ERROR: Exception: Setup program failed with code: 1

    Please refer to this thread. It’ll help you:  Sophos Endpoint Installation Failed: Error downloading/running stage 2: Setup program failed with code: 1 

    In addition, I would suggest you check the required domains and ports allowed in your environment. 

    docs.sophos.com/.../index.html

    Let me know if you need any further help. 

    Regards, 

    Rutvik Chavda
    Global Digital Endpoint Security Engineer
    If a post solves your question, please use the "Verify Answer" button.

    The New Home of Sophos Support Videos!  Visit Sophos Techvids
Reply Children
No Data