SGN 8 install error with both patches

Anyone else having install errors with both patches via automation scripting. I can install the April patch but when I add the second one per the instructions I get below error in the logs. 

 

Here is the steps in the log leading up to the 1635 error. Removed some path into to keep it generic. In the log it says to look for my information in the same log it publishes to....c:\logs\MYPCNAME_SGNClientInstallation.log which is what you see below. 

 

MSI (s) (68:50) [11:06:04:638]: SOFTWARE RESTRICTION POLICY: C:\Users\user1\AppData\Local\Temp\SGN Install Software & Logs\SGNClient_x64.msi has a digital signature
MSI (s) (68:50) [11:06:04:638]: SOFTWARE RESTRICTION POLICY: C:\Users\user1\AppData\Local\Temp\SGN Install Software & Logs\SGNClient_x64.msi is permitted to run at the 'unrestricted' authorization level.
MSI (s) (68:50) [11:06:04:638]: MSCOREE not loaded loading copy from system32
MSI (s) (68:50) [11:06:04:794]: End dialog not enabled
MSI (s) (68:50) [11:06:04:794]: Original package ==> C:\Users\user1\AppData\Local\Temp\SGN Install Software & Logs\SGNClient_x64.msi
MSI (s) (68:50) [11:06:04:794]: Package we're running from ==> C:\WINDOWS\Installer\27219.msi
MSI (s) (68:50) [11:06:04:810]: APPCOMPAT: Compatibility mode property overrides found.
MSI (s) (68:50) [11:06:04:810]: APPCOMPAT: looking for appcompat database entry with ProductCode '{62E54E92-4906-4B21-BFCA-04010831BFBF}'.
MSI (s) (68:50) [11:06:04:810]: APPCOMPAT: no matching ProductCode found in database.
MSI (s) (68:50) [11:06:04:826]: Machine policy value 'TransformsSecure' is 0
MSI (s) (68:50) [11:06:04:826]: User policy value 'TransformsAtSource' is 0
MSI (s) (68:50) [11:06:04:826]: File will have security applied from OpCode.
MSI (s) (68:50) [11:06:04:857]: Original patch ==> C:\Users\user1\AppData\Local\Temp\SGN Install Software & Logs\SGN8005Patch1804_x64.msp
MSI (s) (68:50) [11:06:04:857]: Patch we're running from ==> C:\WINDOWS\Installer\2721a.msp
MSI (s) (68:50) [11:06:04:857]: SOFTWARE RESTRICTION POLICY: Verifying patch --> 'C:\Users\user1\AppData\Local\Temp\SGN Install Software & Logs\SGN8005Patch1804_x64.msp' against software restriction policy
MSI (s) (68:50) [11:06:04:857]: SOFTWARE RESTRICTION POLICY: C:\Users\user1\AppData\Local\Temp\SGN Install Software & Logs\SGN8005Patch1804_x64.msp has a digital signature
MSI (s) (68:50) [11:06:04:857]: SOFTWARE RESTRICTION POLICY: C:\Users\user1\AppData\Local\Temp\SGN Install Software & Logs\SGN8005Patch1804_x64.msp is permitted to run at the 'unrestricted' authorization level.
MSI (s) (68:50) [11:06:04:857]: Note: 1: 1314 2: SGN8005WinRS4CompPatch_x64.msp
MSI (s) (68:50) [11:06:04:857]: Unable to create a temp copy of patch 'SGN8005WinRS4CompPatch_x64.msp'.
MSI (s) (68:50) [11:06:04:857]: Product: Sophos SafeGuard Client 8.00.0.251 - Update '{07D19350-471F-47B2-908F-1EB6EA0DD23E}' could not be installed. Error code 1635. Additional information is available in the log file c:\logs\MYPCNAME_SGNClientInstallation.log.

MSI (s) (68:50) [11:06:04:857]: Windows Installer installed an update. Product Name: Sophos SafeGuard Client 8.00.0.251. Product Version: 8.00.0.251. Product Language: 1033. Manufacturer: Sophos Ltd.. Update Name: {07D19350-471F-47B2-908F-1EB6EA0DD23E}. Installation success or error status: 1635.

MSI (s) (68:50) [11:06:04:857]: Note: 1: 1708
MSI (s) (68:50) [11:06:04:857]: Product: Sophos SafeGuard Client 8.00.0.251 -- Installation failed.

MSI (s) (68:50) [11:06:04:857]: Windows Installer installed the product. Product Name: Sophos SafeGuard Client 8.00.0.251. Product Version: 8.00.0.251. Product Language: 1033. Manufacturer: Sophos Ltd.. Installation success or error status: 1635.

  • I had the same error when a followed the instructions that were shown in knowlegebase article.

    community.sophos.com/.../132095

    Problem was solved by using full path to patch files.

    Changed

    msiexec.exe /i SGNClient_x64.msi PATCH="SGN8005Patch1804_x64.msp;SGN8005WinRS4CompPatch_x64.msp"

    To

    msiexec.exe /i SGNClient_x64.msi PATCH="C:\TEMP\SGN8005Patch1804_x64.msp;C:\TEMP\SGN8005WinRS4CompPatch_x64.msp"

    Regards,

    Holger

  • In reply to Holger:

    Good to know, I will give that a try today. 

    That isn't optimal for automation with SCCM but still doable. 

  • In reply to ScottHolm:

    finally got it tested and working. For those doing any automation with SCCM. In your script you need to create another variable with the second patch. Then in the package just add the patch. The script I use is below. 

     

    msiexec /i " & SGNClientMSI & " /passive " & "/L*v " & Chr(34) & LogPath & objNetwork.ComputerName & "_SGNClientInstallation.log" & Chr(34) & " POACFG=" & Chr(34) & objFSO.GetParentFolderName(WScript.ScriptFullName) & "\" & POACFG & Chr(34) & " " & strAddLocal & " /update " & Chr(34) & objFSO.GetParentFolderName(WScript.ScriptFullName) & "\" & SGNPatch & ";" & objFSO.GetParentFolderName(WScript.ScriptFullName) & "\" & SGNPatch2 & Chr(34) & " /norestart"