Hello Everybody,
I've navigated through the forum and this error code is well documented but no solutions have worked. I have a Windows 2003 R2 32 bit and I'm trying to install Sophos Central Endpoint Advanced.
The OS is in Spanish so it shows some graffics and logs in spanish.
The installation suddenly stoped with "incorrect installation" error:
the bootstrap log shows:
04/18/2017,04:30:43 p.m.,Información,Sending EBS feedback to Sophos...,
04/18/2017,04:30:43 p.m.,Información,Sending data back to Sophos...,
04/18/2017,04:30:43 p.m.,Completado,Successfully connected to the URL (deleted for security purpose)
04/18/2017,04:30:43 p.m.,Información,------------------ Found errors during installation: 134 ------------------,
04/18/2017,04:30:43 p.m.,Información,------------------ Installation program finishing with code 134 ------------------,
The Sophos MCS Install Log shows:
Hint: Valor devuelto 3 = return value 3
MSI (s) (18:F8) [16:30:06:125]: Executing op: ComponentUnregister(ComponentId={8F637D75-4651-4EF6-91F6-BD9AB5912889},ProductKey={2C14E1A2-C4EB-466E-8374-81286D723D3A},BinaryType=0,)
MSI (s) (18:F8) [16:30:06:125]: Executing op: ComponentUnregister(ComponentId={D66C9DF2-7DD5-4A95-B2CE-94C485C38E5C},ProductKey={2C14E1A2-C4EB-466E-8374-81286D723D3A},BinaryType=0,)
MSI (s) (18:F8) [16:30:06:125]: Executing op: ComponentUnregister(ComponentId={7C62E8CD-A070-40F8-8A2D-69538D008931},ProductKey={2C14E1A2-C4EB-466E-8374-81286D723D3A},BinaryType=0,)
MSI (s) (18:F8) [16:30:06:125]: Executing op: ComponentUnregister(ComponentId={8C4712AB-C080-4C8F-9EFE-91E4DA71C1B0},ProductKey={2C14E1A2-C4EB-466E-8374-81286D723D3A},BinaryType=0,)
MSI (s) (18:F8) [16:30:06:125]: Executing op: ComponentUnregister(ComponentId={77BF22C2-1C83-4AAF-81BE-5D1ACAC0DA5C},ProductKey={2C14E1A2-C4EB-466E-8374-81286D723D3A},BinaryType=0,)
MSI (s) (18:F8) [16:30:06:125]: Executing op: End(Checksum=0,ProgressTotalHDWord=0,ProgressTotalLDWord=0)
MSI (s) (18:F8) [16:30:06:125]: Error in rollback skipped. Return: 5
MSI (s) (18:F8) [16:30:06:140]: Closing Terminal Server registry propogation window. Discarding Changes.
MSI (s) (18:F8) [16:30:06:187]: No System Restore sequence number for this installation.
MSI (s) (18:F8) [16:30:06:187]: Unlocking Server
MSI (s) (18:F8) [16:30:06:218]: PROPERTY CHANGE: Deleting UpdateStarted property. Its current value is '1'.
La acción terminó a las 16:30:06: INSTALL. Valor devuelto 3.
Have tried removing all the files and registry from Sophos, uninstalled the Windows security update KB2918614, installed with local administrator, with another new domain admin account, and it isn't working.
What am I missing?
Thanks for all your help.
Regards,
Jose
Hi Christian,
thanks for your reply. There is only two occurrence of "valor devuelto 3". The one that I posted before and this:
MSI (s) (18:F8) [16:30:05:125]: Executing op: FileCopy(SourceName=bq-jz8iz.crl|sophosca2.crl,SourceCabKey=sophosca2.crl,DestName=sophosca2.crl,Attributes=512,FileSize=475,PerTick=32768,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-540208571,HashPart2=-1606669929,HashPart3=871542603,HashPart4=-1241471107,,)
MSI (s) (18:F8) [16:30:05:125]: File: C:\Documents and Settings\All Users.WINDOWS\Datos de programa\Sophos\Certificates\Management Communications System\sophosca2.crl; To be installed; Won't patch; No existing file
MSI (s) (18:F8) [16:30:05:125]: Source for file 'sophosca2.crl' is uncompressed, at 'C:\DOCUME~1\ADMINI~2.SER\CONFIG~1\Temp\sophos_bootstrap\mcsep\Sophos\Certificates\Management Communications System\'.
MSI (s) (18:F8) [16:30:05:125]: Note: 1: 2318 2: C:\Documents and Settings\All Users.WINDOWS\Datos de programa\Sophos\Certificates\Management Communications System\sophosca2.crl
MSI (s) (18:F8) [16:30:05:156]: Executing op: FileCopy(SourceName=ymsdc0ag.crt|sophosca2.crt,SourceCabKey=sophosca2.crt,DestName=sophosca2.crt,Attributes=512,FileSize=1142,PerTick=32768,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=899484485,HashPart2=1068736713,HashPart3=-85403264,HashPart4=170302114,,)
MSI (s) (18:F8) [16:30:05:156]: File: C:\Documents and Settings\All Users.WINDOWS\Datos de programa\Sophos\Certificates\Management Communications System\sophosca2.crt; To be installed; Won't patch; No existing file
MSI (s) (18:F8) [16:30:05:156]: Source for file 'sophosca2.crt' is uncompressed, at 'C:\DOCUME~1\ADMINI~2.SER\CONFIG~1\Temp\sophos_bootstrap\mcsep\Sophos\Certificates\Management Communications System\'.
MSI (s) (18:F8) [16:30:05:156]: Note: 1: 2318 2: C:\Documents and Settings\All Users.WINDOWS\Datos de programa\Sophos\Certificates\Management Communications System\sophosca2.crt
MSI (s) (18:F8) [16:30:05:156]: Executing op: CacheSizeFlush(,)
MSI (s) (18:F8) [16:30:05:156]: Executing op: InstallProtectedFiles(AllowUI=0)
MSI (s) (18:F8) [16:30:05:156]: Executing op: ActionStart(Name=RestoreConfig,,)
MSI (s) (18:F8) [16:30:05:156]: Executing op: CustomActionSchedule(Action=RestoreConfig,ActionType=3329,Source=BinaryData,Target=RestoreConfigFile,CustomActionData=C:\Documents and Settings\All Users.WINDOWS\Datos de programa\Sophos\Management Communications System\Endpoint\Config\Config.xml)
MSI (s) (18:F8) [16:30:05:156]: Executing op: ActionStart(Name=UpdateConfig,,)
MSI (s) (18:F8) [16:30:05:171]: Executing op: CustomActionSchedule(Action=UpdateConfig,ActionType=3073,Source=BinaryData,Target=UpdateConfigFile,CustomActionData=C:\Documents and Settings\All Users.WINDOWS\Datos de programa\Sophos\Management Communications System\Endpoint\Config\Config.xml,dzr-mcs-amzn-us-west-2-fa88.upe.p.hmr.sophos.com,,)
MSI (s) (18:F8) [16:30:05:171]: Creating MSIHANDLE (14) of type 790536 for thread 3064
MSI (s) (18:F4) [16:30:05:171]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSI87.tmp, Entrypoint: UpdateConfigFile
MSI (s) (18:C4) [16:30:05:171]: Generating random cookie.
MSI (s) (18:C4) [16:30:05:187]: Created Custom Action Server with PID 1616 (0x650).
MSI (s) (18:B0) [16:30:05:218]: Running as a service.
MSI (s) (18:B0) [16:30:05:234]: Hello, I'm your 32bit Elevated Non-remapped custom action server.
MSI (s) (18:F4) [16:30:05:718]: Closing MSIHANDLE (14) of type 790536 for thread 3064
MSI (s) (18:F8) [16:30:05:734]: User policy value 'DisableRollback' is 0
MSI (s) (18:F8) [16:30:05:734]: Machine policy value 'DisableRollback' is 0
La acción terminó a las 16:30:05: InstallExecute. Valor devuelto 3.
Thanks for your help.
Regards,
Jose
Hello Jose,
thanks. Looks like the UpdateConfigFile Custom Action fails - it should write ...\Config\Config.xml - but I can see no indication why it does so. I don't really know Central or MCS so I can't say if there could be some additional CustomAction log (perhaps with MSI87 in its name).
Christian
Hi Christian,
Thanks again for your help. I haven't any other log, and the problem with the MCS is beyond my reach. If anybody can help me, it would be much appreciated.
Regards,
Jose
Hello Jose,
I don't use Central so I can't do some testing, if no one else can give some hint (maybe jak?) you should contact Support directly.
Christian
It might be more useful to see the entire MSI log.
Maybe set:
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Installer
Reg_SZ: Logging
Value: voicewarmupx!
First... this will create a "Msi*.log" file in the installing users temp. i.e. %temp% if you're running it as you, \windows\temp if the install is being called as system by AutoUpdate.
Maybe share that file with Pastebin or attach it here.
Regards,
Jak