Jump to content

Archived

This topic is now archived and is closed to further replies.

tomha

ERA 6 Agent Live Installer fails

Recommended Posts

I tried to install ERA 6 Agent to a client using the Live Installer script.

The Agent msi file gets downloaded and executed but after the Status message:

Setting Server Connection into configuration

A Rollback is executed and the ERA Agent does not install.

 

I tried this on different Clients with same result.

 

Any hints, how to troubleshoot this issue

 

Thanks in advance

Thomas

 

 

Share this post


Link to post
Share on other sites

edit the installer in a text editor to include the parameter for the log file (L*V c:\temp\xxx.log" and have a look at the log.

Or, run the msi without any parameters, e.g. Download and run. It won't stall the necessary components or configuration but it might give you a more meaningful error.

Windows event viewer might also contains clues.

Share this post


Link to post
Share on other sites

Agent Live installer creates an install log %temp%\ra-agent-install.log by default so there's no need to add it manually ;)

Share this post


Link to post
Share on other sites

Thanks for your help.

I looked at the logfile and this section seems to show the problem, but i do not understand the meaning since there is no network password used

 

 

INFO: Custom action 'ConfigSetServerConnection' ended.
MSI (s) (84:A4) [20:11:42:264]: Executing op: ActionStart(Name=CA_ConfigInsertPeerCertFile,Description=Inserting peer cert. file into configuration,)
Action 20:11:42: CA_ConfigInsertPeerCertFile. Inserting peer cert. file into configuration
MSI (s) (84:A4) [20:11:42:264]: Executing op: CustomActionSchedule(Action=CA_ConfigInsertPeerCertFile,ActionType=11265,Source=BinaryData,Target=**********,CustomActionData=**********)
MSI (s) (84:34) [20:11:42:264]: Invoking remote custom action. DLL: C:\Windows\Installer\MSICE38.tmp, Entrypoint: ConfigInsertPeerCertFile
INFO: Custom action 'ConfigInsertPeerCertFile' successfully initialized.
INFO: Successful GET property 'P_MODULES_DIR' with value - C:\Users\Thomas\AppData\Local\Temp\EsetRemoteAdminAgent\
INFO: Successful GET property 'P_DB_TYPE' with value - SQLite
INFO: Successful GET property 'P_DB_CONNECTORS_DIR' with value - C:\Users\Thomas\AppData\Local\Temp\EsetRemoteAdminAgent\
INFO: Successful GET property 'P_PRODUCT_NAME' with value - Agent
INFO: Successful GET property 'P_DB_PATH' with value - C:\ProgramData\ESET\RemoteAdministrator\Agent\EraAgentApplicationData\Data\data.db
INFO: Successful GET property 'P_CERT_PATH' with value - C:\Users\Thomas\AppData\Local\Temp\EsetRemoteAdminAgent\peercert.pfx
INFO: Successful GET property 'P_LOAD_CERTS_FROM_FILE_AS_BASE64' with value - YES
INFO: Successful GET property 'P_CERT_PASSWORD' with value - **********
ERROR: (ConfigInsertPeerCertFile) Checking certificate ended with error 'ParsePfxCertificate: PFXImportCertStore failed with Das angegebene Netzwerkkennwort ist falsch. Error code: 0x56'. Path provided - 'C:\Users\Thomas\AppData\Local\Temp\EsetRemoteAdminAgent\peercert.pfx'
INFO: Successful GET property 'P_SILENT' with value - UILevel=4
INFO: Custom action 'ConfigInsertPeerCertFile' ended.
CustomAction CA_ConfigInsertPeerCertFile returned actual error code 1603 (note this may not be 100% accurate if translation happened inside sandbox)
Action ended 20:11:42: InstallExecute. Return value 3.

 

Then i tried to export the certs and installed the agent manually. This worked and the agent service is running. But it does not connect to the server.

The tace.log shows this:

2015-08-31 18:22:14 Information: CAgentSecurityModule [Thread 1e20]: Agent peer certificate with subject 'CN=Agent Zertifikat ERA Agent, O=xxx, L=xxx, S=xxx, C=xx' issued by 'CN=xxx, O=xxx, L=xxx, S=xxx, C=xx' with serial number '01ce8a559032cc4d2497df78b10ad8d5f501' is and will be valid in 30 days
2015-08-31 18:22:14 Information: Kernel [Thread 470]: Used memory after modules start-up is 27128 KB
2015-08-31 18:22:19 Error: CAgentSecurityModule [Thread 1e20]: Certificated user verification failed with: NodVerifyCertificateChain failed: NodVerifyTrustResult: 6, NVT_NotTrustedRoot, X509ChainStatus: 0x10000, X509CSF_PartialChain
2015-08-31 18:22:19 Error: NetworkModule [Thread 1c64]: Receive: NodSslWriteEncryptedData: Handshake failed to complete., ResolvedIpAddress:xxx, ResolvedHostname:, ResolvedPort:2222
2015-08-31 18:22:19 Error: NetworkModule [Thread 1c64]: Protocol failure for session id 1, error:Receive: NodSslWriteEncryptedData: Handshake failed to complete.
2015-08-31 18:22:19 Error: CReplicationModule [Thread 328]: CReplicationManager: Replication (network) connection to 'host: "xxx" port: 2222' failed with: Receive: NodSslWriteEncryptedData: Handshake failed to complete.
2015-08-31 18:23:05 Error: CAgentSecurityModule [Thread 1f88]: Certificated user verification failed with: NodVerifyCertificateChain failed: NodVerifyTrustResult: 6, NVT_NotTrustedRoot, X509ChainStatus: 0x10000, X509CSF_PartialChain
2015-08-31 18:23:05 Error: NetworkModule [Thread 1c64]: Receive: NodSslWriteEncryptedData: Handshake failed to complete., ResolvedIpAddress:xxx, ResolvedHostname:, ResolvedPort:2222
2015-08-31 18:23:05 Error: NetworkModule [Thread 1c64]: Protocol failure for session id 2, error:Receive: NodSslWriteEncryptedData: Handshake failed to complete.
2015-08-31 18:23:05 Error: CReplicationModule [Thread 1b38]: CReplicationManager: Replication (network) connection to 'host: "xxx" port: 2222' failed with: Receive: NodSslWriteEncryptedData: Handshake failed to complete.

 

Share this post


Link to post
Share on other sites

Update:


After upgrade to ERA 6.2 Live Installer works as expected.


Share this post


Link to post
Share on other sites

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...