Most Valued Members ewong 8 Posted March 28 Most Valued Members Posted March 28 Hi, I'm trying to deploy the Eset Endpoint AV to a Windows 7 32bit system(I had to remove the agent and the current EEA due to the agent not contacting the Protect server). I know for a fact v11 no longer work for Win7, and the last version I see from [1] is v9. So I create a task that installs v9.1.2071.0 (from a local repo) and run it. However it fails. (Unfortunately, there's little to no info in PROTECT's Task Execution Fail reason). So I went into the client and took a look at the task.log. I see the following: 2024-03-28 05:31:36 Error: CSystemConnectorModule [Thread 1150]: SoftwareInstallation: MsiInstallProduct: Received error with text: The app that you are trying to run is not supported on this version of Windows. See https://go.eset.com/acs23 2024-03-28 05:31:37 Error: CSystemConnectorModule [Thread 1150]: SoftwareInstallation: Installation failed with: Fatal error during installation. Error code: 0x643 (0x643), The app that you are trying to run is not supported on this version of Windows. See https://go.eset.com/acs23, see software-install.log for more information located at: C:\ProgramData\ESET\RemoteAdministrator\Agent\EraAgentApplicationData\Logs\ Then in the software-install.log: === Verbose logging started: 3/28/2024 14:19:46 Build type: SHIP UNICODE 5.00.7601.00 Calling process: C:\Program Files\ESET\RemoteAdministrator\Agent\ERAAgent.exe === MSI (c) (38:CC) [14:19:46:868]: Resetting cached policy values MSI (c) (38:CC) [14:19:46:884]: Machine policy value 'Debug' is 0 MSI (c) (38:CC) [14:19:46:900]: ******* RunEngine: ******* Product: C:\ProgramData\ESET\RemoteAdministrator\Agent\EraAgentApplicationData\Data\install.cache\eea_nt32.msi ******* Action: ******* CommandLine: ********** MSI (c) (38:CC) [14:19:46:931]: Client-side and UI is none or basic: Running entire install on the server. MSI (c) (38:CC) [14:19:46:946]: Grabbed execution mutex. MSI (c) (38:CC) [14:19:47:492]: Cloaking enabled. MSI (c) (38:CC) [14:19:47:508]: Attempting to enable all disabled privileges before calling Install on Server MSI (c) (38:CC) [14:19:47:524]: Incrementing counter to disable shutdown. Counter after increment: 0 MSI (s) (7C:F4) [14:19:47:555]: Running installation inside multi-package transaction C:\ProgramData\ESET\RemoteAdministrator\Agent\EraAgentApplicationData\Data\install.cache\eea_nt32.msi MSI (s) (7C:F4) [14:19:47:617]: Grabbed execution mutex. MSI (s) (7C:04) [14:19:47:695]: Resetting cached policy values MSI (s) (7C:04) [14:19:47:726]: Machine policy value 'Debug' is 0 MSI (s) (7C:04) [14:19:47:726]: ******* RunEngine: ******* Product: C:\ProgramData\ESET\RemoteAdministrator\Agent\EraAgentApplicationData\Data\install.cache\eea_nt32.msi ******* Action: ******* CommandLine: ********** MSI (s) (7C:04) [14:19:47:758]: Machine policy value 'DisableUserInstalls' is 0 MSI (s) (7C:04) [14:19:47:789]: SRSetRestorePoint skipped for this transaction. MSI (s) (7C:04) [14:19:47:805]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer 3: 2 MSI (s) (7C:04) [14:19:47:820]: File will have security applied from OpCode. MSI (s) (7C:04) [14:19:47:898]: SOFTWARE RESTRICTION POLICY: Verifying package --> 'C:\ProgramData\ESET\RemoteAdministrator\Agent\EraAgentApplicationData\Data\install.cache\eea_nt32.msi' against software restriction policy MSI (s) (7C:04) [14:19:47:945]: SOFTWARE RESTRICTION POLICY: C:\ProgramData\ESET\RemoteAdministrator\Agent\EraAgentApplicationData\Data\install.cache\eea_nt32.msi has a digital signature MSI (s) (7C:04) [14:19:47:961]: SOFTWARE RESTRICTION POLICY: C:\ProgramData\ESET\RemoteAdministrator\Agent\EraAgentApplicationData\Data\install.cache\eea_nt32.msi is permitted to run because the user token authorizes execution (system or service token). MSI (s) (7C:04) [14:19:47:976]: End dialog not enabled MSI (s) (7C:04) [14:19:47:992]: Original package ==> C:\ProgramData\ESET\RemoteAdministrator\Agent\EraAgentApplicationData\Data\install.cache\eea_nt32.msi MSI (s) (7C:04) [14:19:48:007]: Package we're running from ==> C:\Windows\Installer\a2b0da.msi MSI (s) (7C:04) [14:19:48:023]: APPCOMPAT: Compatibility mode property overrides found. MSI (s) (7C:04) [14:19:48:039]: APPCOMPAT: looking for appcompat database entry with ProductCode '{6D643A4F-0D98-4DB9-B19D-9AF972E90458}'. MSI (s) (7C:04) [14:19:48:039]: APPCOMPAT: no matching ProductCode found in database. MSI (s) (7C:04) [14:19:48:070]: MSCOREE not loaded loading copy from system32 MSI (s) (7C:04) [14:19:48:085]: Machine policy value 'TransformsSecure' is 0 MSI (s) (7C:04) [14:19:48:085]: User policy value 'TransformsAtSource' is 0 MSI (s) (7C:04) [14:19:48:101]: Machine policy value 'DisablePatch' is 0 MSI (s) (7C:04) [14:19:48:117]: Machine policy value 'AllowLockdownPatch' is 0 MSI (s) (7C:04) [14:19:48:132]: Machine policy value 'DisableLUAPatching' is 0 MSI (s) (7C:04) [14:19:48:148]: Machine policy value 'DisableFlyWeightPatching' is 0 MSI (s) (7C:04) [14:19:48:148]: APPCOMPAT: looking for appcompat database entry with ProductCode '{6D643A4F-0D98-4DB9-B19D-9AF972E90458}'. MSI (s) (7C:04) [14:19:48:163]: APPCOMPAT: no matching ProductCode found in database. MSI (s) (7C:04) [14:19:48:195]: Transforms are not secure. MSI (s) (7C:04) [14:19:48:210]: PROPERTY CHANGE: Adding MsiLogFileLocation property. Its value is 'C:\ProgramData\ESET\RemoteAdministrator\Agent\EraAgentApplicationData\Logs\software-install.log'. MSI (s) (7C:04) [14:19:48:210]: Command Line: ALLUSERS=1 REBOOT=ReallySuppress CFG_POTENTIALLYUNWANTED_ENABLED=1 INSTALLED_BY_ERA=1 REBOOT_POSTPONE=30 PRODUCT_LANG_CODE=en-us CURRENTDIRECTORY=C:\Windows\system32 CLIENTUILEVEL=3 MSICLIENTUSESEXTERNALUI=1 CLIENTPROCESSID=1592 MSI (s) (7C:04) [14:19:48:226]: PROPERTY CHANGE: Adding PackageCode property. Its value is '{2571B191-D282-48A4-9290-E57663186DDD}'. MSI (s) (7C:04) [14:19:48:241]: Product Code passed to Engine.Initialize: '' MSI (s) (7C:04) [14:19:48:257]: Product Code from property table before transforms: '{6D643A4F-0D98-4DB9-B19D-9AF972E90458}' MSI (s) (7C:04) [14:19:48:257]: Product Code from property table after transforms: '{6D643A4F-0D98-4DB9-B19D-9AF972E90458}' MSI (s) (7C:04) [14:19:48:273]: Product not registered: beginning first-time install MSI (s) (7C:04) [14:19:48:288]: Product {6D643A4F-0D98-4DB9-B19D-9AF972E90458} is not managed. MSI (s) (7C:04) [14:19:48:304]: MSI_LUA: Credential prompt not required, user is an admin MSI (s) (7C:04) [14:19:48:319]: PROPERTY CHANGE: Adding ProductState property. Its value is '-1'. MSI (s) (7C:04) [14:19:48:319]: Entering CMsiConfigurationManager::SetLastUsedSource. MSI (s) (7C:04) [14:19:48:335]: User policy value 'SearchOrder' is 'nmu' MSI (s) (7C:04) [14:19:48:351]: Adding new sources is allowed. MSI (s) (7C:04) [14:19:48:366]: PROPERTY CHANGE: Adding PackagecodeChanging property. Its value is '1'. MSI (s) (7C:04) [14:19:48:366]: Package name extracted from package path: 'eea_nt32.msi' MSI (s) (7C:04) [14:19:48:382]: Package to be registered: 'eea_nt32.msi' MSI (s) (7C:04) [14:19:48:397]: Note: 1: 2262 2: AdminProperties 3: -2147287038 MSI (s) (7C:04) [14:19:48:413]: Machine policy value 'DisableMsi' is 0 MSI (s) (7C:04) [14:19:48:413]: Machine policy value 'AlwaysInstallElevated' is 0 MSI (s) (7C:04) [14:19:48:429]: User policy value 'AlwaysInstallElevated' is 0 MSI (s) (7C:04) [14:19:48:444]: Product installation will be elevated because user is admin and product is being installed per-machine. MSI (s) (7C:04) [14:19:48:460]: Running product '{6D643A4F-0D98-4DB9-B19D-9AF972E90458}' with elevated privileges: Product is assigned. MSI (s) (7C:04) [14:19:48:475]: PROPERTY CHANGE: Adding REBOOT property. Its value is 'ReallySuppress'. MSI (s) (7C:04) [14:19:48:475]: PROPERTY CHANGE: Adding CFG_POTENTIALLYUNWANTED_ENABLED property. Its value is '1'. MSI (s) (7C:04) [14:19:48:491]: PROPERTY CHANGE: Modifying INSTALLED_BY_ERA property. Its current value is '0'. Its new value: '1'. MSI (s) (7C:04) [14:19:48:507]: PROPERTY CHANGE: Modifying REBOOT_POSTPONE property. Its current value is '0'. Its new value: '30'. MSI (s) (7C:04) [14:19:48:522]: PROPERTY CHANGE: Adding PRODUCT_LANG_CODE property. Its value is 'en-us'. MSI (s) (7C:04) [14:19:48:522]: PROPERTY CHANGE: Adding CURRENTDIRECTORY property. Its value is 'C:\Windows\system32'. MSI (s) (7C:04) [14:19:48:538]: PROPERTY CHANGE: Adding CLIENTUILEVEL property. Its value is '3'. MSI (s) (7C:04) [14:19:48:553]: PROPERTY CHANGE: Adding MSICLIENTUSESEXTERNALUI property. Its value is '1'. MSI (s) (7C:04) [14:19:48:569]: PROPERTY CHANGE: Adding CLIENTPROCESSID property. Its value is '1592'. MSI (s) (7C:04) [14:19:48:569]: Machine policy value 'DisableAutomaticApplicationShutdown' is 0 MSI (s) (7C:04) [14:19:48:585]: RESTART MANAGER: Disabled by MSIRESTARTMANAGERCONTROL property; Windows Installer will use the built-in FilesInUse functionality. MSI (s) (7C:04) [14:19:48:600]: PROPERTY CHANGE: Adding MsiSystemRebootPending property. Its value is '1'. MSI (s) (7C:04) [14:19:48:616]: TRANSFORMS property is now: MSI (s) (7C:04) [14:19:48:631]: PROPERTY CHANGE: Adding VersionDatabase property. Its value is '500'. MSI (s) (7C:04) [14:19:48:631]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming MSI (s) (7C:04) [14:19:48:663]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\Favorites MSI (s) (7C:04) [14:19:48:678]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Network Shortcuts MSI (s) (7C:04) [14:19:48:709]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\Documents MSI (s) (7C:04) [14:19:48:787]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Printer Shortcuts MSI (s) (7C:04) [14:19:48:897]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Recent MSI (s) (7C:04) [14:19:48:975]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\SendTo MSI (s) (7C:04) [14:19:49:021]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Templates MSI (s) (7C:04) [14:19:49:037]: SHELL32::SHGetFolderPath returned: C:\ProgramData MSI (s) (7C:04) [14:19:49:053]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Local MSI (s) (7C:04) [14:19:49:068]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\Pictures MSI (s) (7C:04) [14:19:49:131]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools MSI (s) (7C:04) [14:19:49:146]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup MSI (s) (7C:04) [14:19:49:209]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs MSI (s) (7C:04) [14:19:49:349]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu MSI (s) (7C:04) [14:19:49:458]: SHELL32::SHGetFolderPath returned: C:\Users\Public\Desktop MSI (s) (7C:04) [14:19:49:489]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools MSI (s) (7C:04) [14:19:49:505]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup MSI (s) (7C:04) [14:19:49:536]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs MSI (s) (7C:04) [14:19:49:552]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu MSI (s) (7C:04) [14:19:49:567]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\Desktop MSI (s) (7C:04) [14:19:49:599]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Templates MSI (s) (7C:04) [14:19:49:614]: SHELL32::SHGetFolderPath returned: C:\Windows\Fonts MSI (s) (7C:04) [14:19:49:645]: Note: 1: 2898 2: MS Sans Serif 3: MS Sans Serif 4: 0 5: 16 MSI (s) (7C:04) [14:19:49:661]: MSI_LUA: Setting MsiRunningElevated property to 1 because the install is already running elevated. MSI (s) (7C:04) [14:19:49:692]: PROPERTY CHANGE: Adding MsiRunningElevated property. Its value is '1'. MSI (s) (7C:04) [14:19:49:708]: PROPERTY CHANGE: Adding Privileged property. Its value is '1'. MSI (s) (7C:04) [14:19:49:739]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2 MSI (s) (7C:04) [14:19:49:755]: PROPERTY CHANGE: Adding USERNAME property. Its value is 'cc'. MSI (s) (7C:04) [14:19:49:770]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2 MSI (s) (7C:04) [14:19:49:801]: PROPERTY CHANGE: Adding DATABASE property. Its value is 'C:\Windows\Installer\a2b0da.msi'. MSI (s) (7C:04) [14:19:49:833]: PROPERTY CHANGE: Adding OriginalDatabase property. Its value is 'C:\ProgramData\ESET\RemoteAdministrator\Agent\EraAgentApplicationData\Data\install.cache\eea_nt32.msi'. MSI (s) (7C:04) [14:19:49:879]: Machine policy value 'MsiDisableEmbeddedUI' is 0 MSI (s) (7C:04) [14:19:49:911]: EEUI - Disabling MsiEmbeddedUI due to existing external or embedded UI MSI (s) (7C:04) [14:19:49:926]: EEUI - Disabling MsiEmbeddedUI for service because it's not a quiet/basic install === Logging started: 3/28/2024 14:19:49 === MSI (s) (7C:04) [14:19:49:973]: Note: 1: 2205 2: 3: PatchPackage MSI (s) (7C:04) [14:19:49:989]: Machine policy value 'DisableRollback' is 0 MSI (s) (7C:04) [14:19:50:004]: User policy value 'DisableRollback' is 0 MSI (s) (7C:04) [14:19:50:035]: PROPERTY CHANGE: Adding UILevel property. Its value is '2'. MSI (s) (7C:04) [14:19:50:051]: PROPERTY CHANGE: Adding ACTION property. Its value is 'INSTALL'. MSI (s) (7C:04) [14:19:50:067]: Doing action: INSTALL Action start 14:19:50: INSTALL. MSI (s) (7C:04) [14:19:50:113]: Running ExecuteSequence MSI (s) (7C:04) [14:19:50:129]: Skipping action: SetEmptyREINSTALLMODE (condition is false) MSI (s) (7C:04) [14:19:50:160]: Skipping action: Win64ErrorMessage (condition is false) MSI (s) (7C:04) [14:19:50:176]: Doing action: InstSuppCheckSha2CodeSigningSupport Action start 14:19:50: InstSuppCheckSha2CodeSigningSupport. MSI (s) (7C:F8) [14:19:50:223]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIBA3D.tmp, Entrypoint: caCheckSha2CodeSigningSupport MSI (s) (7C:88) [14:19:50:238]: Generating random cookie. MSI (s) (7C:88) [14:19:50:269]: Created Custom Action Server with PID 6068 (0x17B4). MSI (s) (7C:C0) [14:19:50:301]: Running as a service. MSI (s) (7C:C0) [14:19:50:332]: Hello, I'm your 32bit Elevated Non-remapped custom action server. Action ended 14:19:50: InstSuppCheckSha2CodeSigningSupport. Return value 1. MSI (s) (7C:04) [14:19:50:410]: Doing action: InstSuppCheckAzureCodeSigningSupport Action start 14:19:50: InstSuppCheckAzureCodeSigningSupport. MSI (s) (7C:B0) [14:19:50:457]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIBB28.tmp, Entrypoint: caCheckAzureCodeSigningSupport MSI (s) (7C!48) [14:19:50:503]: PROPERTY CHANGE: Adding AzureCodeSigningNotSupported property. Its value is '1'. Action ended 14:19:50: InstSuppCheckAzureCodeSigningSupport. Return value 1. MSI (s) (7C:04) [14:19:50:613]: Doing action: SetCLEANINSTALL Action start 14:19:50: SetCLEANINSTALL. MSI (s) (7C:04) [14:19:50:659]: PROPERTY CHANGE: Adding CLEANINSTALL property. Its value is '1'. Action ended 14:19:50: SetCLEANINSTALL. Return value 1. MSI (s) (7C:04) [14:19:50:706]: Doing action: LaunchConditions Action start 14:19:50: LaunchConditions. MSI (s) (7C:04) [14:19:50:909]: Product: ESET Endpoint Antivirus -- The app that you are trying to run is not supported on this version of Windows. See https://go.eset.com/acs23 Action ended 14:19:50: LaunchConditions. Return value 3. MSI (s) (7C:04) [14:19:50:940]: Doing action: InstSuppFailed Action start 14:19:50: InstSuppFailed. MSI (s) (7C:E4) [14:19:50:987]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIBD3B.tmp, Entrypoint: caOnFailed ESET: Entering CA InstSupp!caOnFailed (limited: no) MSI (s) (7C!00) [14:19:51:081]: PROPERTY CHANGE: Adding INSTDATAFILE property. Its value is 'C:\Windows\TEMP\eset.temp\{02D83BBE-F1B6-F07A-C57A-B0CDF137A2EE}\_InstData.xml'. ESET: Analytics Report - Disabled by conditions. ESET: Failed to start InstHelper ESET: output file : C:\Windows\Temp\eset\bts.stats\msi-20240328-061951.json ESET: Failed to start InstHelper (-1). ESET: Failed to start InstHelper (-1). ESET: Returing from CA InstSupp!caOnFailed with status 0 (duration: 0.187) Action ended 14:19:51: InstSuppFailed. Return value 1. Action ended 14:19:51: INSTALL. Return value 3. === Logging stopped: 3/28/2024 14:19:51 === MSI (s) (7C:04) [14:19:51:346]: Note: 1: 1708 MSI (s) (7C:04) [14:19:51:361]: Product: ESET Endpoint Antivirus -- Installation failed. MSI (s) (7C:04) [14:19:51:393]: Windows Installer installed the product. Product Name: ESET Endpoint Antivirus. Product Version: 9.1.2071.0. Product Language: 1033. Manufacturer: ESET, spol. s r.o.. Installation success or error status: 1603. Just in case it was getting the 64bit version, I took a look at the log for the local repository and it showed the following: 192.168.99.10 - - [28/Mar/2024:13:44:47 +0800] "GET /com/eset/apps/business/eea/windows/v9/9.1.2071.0/eea_nt32.msi HTTP/1.1" 200 45789184 ^C I noticed that 9.1.2071.1 is in the same directory as 9.1.2071.0, but that version isn't available in the list of versions when I created the Deploy task. Before I do this manually, I'd like to point out what I might be doing wrong. Thanks Ed [1] -https://support-eol.eset.com/en/policy_business/os_support_charts.html#ms_overview
OP System 0 Posted April 17 Posted April 17 Hi, same problem here with Win Server 2008 R2 x64 Both task and manual attempt fails
OP System 0 Posted April 17 Posted April 17 @ewong look at this line: MSI (s) (7C:04) [14:19:50:909]: Product: ESET Endpoint Antivirus -- The app that you are trying to run is not supported on this version of Windows. See https://go.eset.com/acs23 Windows 7 doesn't support the new Code Signing platform (a.k.a. ACS / Trusted Signing) unless you have a ESU license and install KB5006743 or later as per here: https://support.microsoft.com/en-au/topic/kb5022661-windows-support-for-the-trusted-signing-formerly-azure-code-signing-program-4b505a31-fa1e-4ea6-85dd-6630229e8ef4 Basically you're stuck to latest version that was released before 9.1.2066.0. See also https://forum.eset.com/topic/38212-install-failing-on-2008r2-servers-with-acs-support/
Recommended Posts