Unable to install agent Sophos Central in Windows Server 2008 Service Pack 2 - The Setup doesn't start.

Can you run Process Monitor when you run it to gain any insight?

Hello Jak,

Yes, i tried it but nothing.

Also, are you using a local admin or domain admin or a user account belonging to domain or local admins?  

And 

One more thought, have you tried running SFC /SCANNOW to see if any Window System files have become corrupted?  

I've updated my previous comment to suggest ensuring the computer is fully up to date with Windows Updates.  In particular ensure any root certs have been updated.

Hi Badrobot,

I installed Procmon in that server and this was found:

I am installing the Setup with a domain user member of the administrator group.

The server needs to be updated, they has not noticed.

Will that be the inconvenience?

Hello Manuel Linares,

Updates were installed: Never and 203 important updates available
It's a good idea to install them.

Nevertheless, Process Monitor's output seems strange. Why should SophosSetup.exe look for msjava.dll (that's not present) or try to find Flash?
Unfortunately the screenshot doesn't tell much. Just some arbitrary events out of 60,000. Paths are truncated (it would be interesting what all these pointing to your %Temp% directory are. In case of a process that seemingly doesn't run the events around the attempted start are necessary. Apparently it does run but does some weird things and then stops. Usually in such cases one has to start with all events from start to end and work through the chaff to find those areas that contain interesting and important information.

Christian     

Manuel, have you tried creating an official support case with Sophos on this issue?  You can initiate that from the Help menu when logged into Sophos Central.

Hi Brucek,

Yes, I have already opened the case with Sophos and I am waiting for your response.

Thanks for your help.

It is more than likely due to the pending updates.

I'm pretty certain it will be fixed by the Windows updates.  I assume that will update the certificates and it will run.

Hello Jak,

All the pending updates were installed but despite this, the incident was still present.

We proceeded to raise the case with Sophos directly and told us that it is an issue with Server 2008 - Non R2 systems, this OS is treated as a Legacy OS in regards to the Sophos installation package. I was informed that they are preparing a KB with the instructions to solve the problem in the future.

Thanks for your support.

Kind regards.

Hello Jak,

All the pending updates were installed but despite this, the incident was still present.

We proceeded to raise the case with Sophos directly and told us that it is an issue with Server 2008 - Non R2 systems, this OS is treated as a Legacy OS in regards to the Sophos installation package. I was informed that they are preparing a KB with the instructions to solve the problem in the future.

Thanks for your support.

Kind regards.

Is there any update on this?  We are having the same problem with Windows 2008 32-bit Servers.  Thanks

I put in a ticket with Sophos Support and they were able to help me with this problem.  They provided the 2 following potential workarounds.  I tried the 2nd workaround and it worked for me.

1) The first thing to try is to install the SophosSetup.exe Cert, then retry the installer
1. Right click on the SophosSetup.exe installer while on the affected server
2. Click Properties > Digital Signatures
3. Click on the first 'sign' in the list, you should see 2. Highlight it and select details
4. Click View Certificate on the next page
5. Please check the date valid from and to on that page. Are those correct, has the certificate correctly stated a date in the past and future?
6. Finally please click Install Certificate and click Next, Next, Finish to install the certificate.
7. Please repeat these steps for the second 'sign' in the list back on the Properties > Digital Signatures page.
8. Can you try the new installer following this, does it provide any errors?


2) The second alternative workaround is to use our old Sophos Installer.
1. Log into Sophos Central Admin Dashboard > click "Protect Devices"
2. Right click the Server Download link "Download Windows Server Installer" > copy the link URL > paste it into Notepad (my example link is below)
https://dzr-api-amzn-us-west-2-fa88.api-upe.p.hmr.sophos.com/api/download/ba429020527f646c34aa31e057a0808c/SophosSetup.exe

3. Change "SophosSetup.exe" to "SophosInstall.exe"
https://dzr-api-amzn-us-west-2-fa88.api-upe.p.hmr.sophos.com/api/download/ba429020527f646c34aa31e057a0808c/SophosInstall.exe

4. Paste the new URL into your browser, and download the 25 MB install file
https://dzr-api-amzn-us-west-2-fa88.api-upe.p.hmr.sophos.com/api/download/ba429020527f646c34aa31e057a0808c/SophosInstall.exe

5. Use SophosInstall.exe to install on this server