This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos Enterprise Console not deploying Sophos to PCs with previous installation from different SEC

Hello

I have the following issue:

Windows Server 2008 R2 running Sophos Enterprise Console 5.4.1. This server deploys Sophos and Sophos endpoints work normally.

New Windows Server 2016 running its own instance of Sophos Enterprise Console 5.5.0. I want to use this server to deploy Sophos across our network and then turn off the old server without doing a migration.


When I deploy Sophos from the 2016 server to a PC that is currently running Sophos deployed from the 2008 server it will install but in the enterprise console it will just stay on the orange download arrow.

When I open the Sophos network communications report it says it is using an SSL certificate that is incompatible and the parent address is the IP address of the old Sophos server and not the one it has just been deployed from.

If I deploy Sophos from the 2016 server to a PC that has not previously had Sophos on it works normally.

I am only getting issues when I deploy it to PCs with existing installations. It appears that the Sophos instance from the 2008 server is not being fully uninstalled and therefore stopping the new installation installing fully.

Any help much appreciated



This thread was automatically locked due to age.
Parents
  • Hello Clam,

    " When I deploy Sophos from the 2016 server to a PC that is currently running Sophos deployed from the 2008 server it will install but in the enterprise console it will just stay on the orange download arrow." If the new 2016 and the machine you're trying to push Sophos onto are on the same domain - can you try using a different Domain Admin credentials and give the Push install one more try? 

    From the machine where you are trying to install Sophos onto - can you navigate to \\NewServer2016\SophosUpdate and run the setup.exe - check if the new Sophos installs correctly.

    Thanks,

    Vikas

Reply
  • Hello Clam,

    " When I deploy Sophos from the 2016 server to a PC that is currently running Sophos deployed from the 2008 server it will install but in the enterprise console it will just stay on the orange download arrow." If the new 2016 and the machine you're trying to push Sophos onto are on the same domain - can you try using a different Domain Admin credentials and give the Push install one more try? 

    From the machine where you are trying to install Sophos onto - can you navigate to \\NewServer2016\SophosUpdate and run the setup.exe - check if the new Sophos installs correctly.

    Thanks,

    Vikas

Children
  • Hello

    Thank you for your reply.

    I have just solved my issue. When uninstalling Sophos it left "mrinit.conf.orig" file in Program Files(x86)\Sophos\Remote Management System. This file contained the parent address for the old Sophos server. Once I deleted it and then redeployed from the new Enterprise Console it works and the Network Communcations Log shows no errors.

    Thank you for your help. 

  • Hello CIam,

    the existence of mrinit.conf.orig suggests that at one time in the past the endpoint has updated from a configured CID (i.e. one with a custom mrinit.conf in the \rms subdirectory). It should work if the new CID has also a configuration applied.

    Christian