Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1 reply
  • Subscribers 3 subscribers
  • Views 3249 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SSPSERVICE.EXE timeout (error 1053)

Nicola Argiolas

Hello!

I am installing Sophos Client on WIndows Server 2019 and most of the components went well except End Point Defence which returns on SEC the following error:

Failed to install Sophos Endpoint Defense: Error code 80004005 [0x00000067]

In the local machine I found in the installation logs that everything goes fine until this point:

4/16/2021 10:09:00 AM, INFO : Starting Sophos System Protection Service...
4/16/2021 10:09:31 AM, ERROR : Failed to start service - Sophos System Protection Service with error 1053.
4/16/2021 10:09:31 AM, ERROR : Error installing Sophos Endpoint Defense: Failed to start service: Timed out

After this failure, the component is successfully uninstalled.

Looking inside SED logs, I found only this error lines:

2021-04-16T08:09:35.263Z SED Comms Error Count: 1 Process denied authorization for comms: \DEVICE\HARDDISKVOLUME4\PROGRAM FILES\SOPHOS\ENDPOINT DEFENSE\SSPSERVICE.EXE [4768:132630341409695869]
2021-04-16T08:09:35.263Z SED Comms Error Count: 1 Insecure process requests system component ID 71: [4768:132630341409695869]
2021-04-16T08:09:35.263Z SED Comms Error Count: 1 Insecure process requests system component ID 72: [4768:132630341409695869]

And now I do not know how to proceed.

Thanks in advance for your suggestions.



This thread was automatically locked due to age.
Parents
  • 0

    From support:

    Error due to server has high no of CPU core.

    1. Create a .json file by following the steps below
      1. Open Notepad
      2. Paste the information
        {
            "num_analyzer_threads": 10
        }
      3. Click File > Save as > changed the type to all files and name the file as threatdetectionconf.json
    2. Disable Tamper Protection
    3. Stop the Autoupdate service
    4. Copy the created threatdetectionconf.json file toC:\ProgramData\Sophos\Endpoint Defense\Config\
    5. Start the Autoupdate service
    6. Update the endpoint client and wait for 3-5 minutes, or reboot the machine if necessary
    7. If the installation of SED still fails, then rerun the sophos client installer and reboot the server .
Reply
  • 0

    From support:

    Error due to server has high no of CPU core.

    1. Create a .json file by following the steps below
      1. Open Notepad
      2. Paste the information
        {
            "num_analyzer_threads": 10
        }
      3. Click File > Save as > changed the type to all files and name the file as threatdetectionconf.json
    2. Disable Tamper Protection
    3. Stop the Autoupdate service
    4. Copy the created threatdetectionconf.json file toC:\ProgramData\Sophos\Endpoint Defense\Config\
    5. Start the Autoupdate service
    6. Update the endpoint client and wait for 3-5 minutes, or reboot the machine if necessary
    7. If the installation of SED still fails, then rerun the sophos client installer and reboot the server .
Children
No Data
Unfiltered HTML