ERA 6 Agent Live Installer fails

[tomha 3]

I tried to install ERA 6 Agent to a client using the Live Installer script.

The Agent msi file gets downloaded and executed but after the Status message:

Setting Server Connection into configuration

A Rollback is executed and the ERA Agent does not install.

 

I tried this on different Clients with same result.

 

Any hints, how to troubleshoot this issue

 

Thanks in advance

Thomas

 

 

[jimwillsher 65]

edit the installer in a text editor to include the parameter for the log file (L*V c:\temp\xxx.log" and have a look at the log.

Or, run the msi without any parameters, e.g. Download and run. It won't stall the necessary components or configuration but it might give you a more meaningful error.

Windows event viewer might also contains clues.

[Marcos 5,074]

Agent Live installer creates an install log %temp%\ra-agent-install.log by default so there's no need to add it manually

[jimwillsher 65]

Thanks Marcos, I had forgotten that :-)

[tomha 3]

Thanks for your help.

I looked at the logfile and this section seems to show the problem, but i do not understand the meaning since there is no network password used

 

 

INFO: Custom action 'ConfigSetServerConnection' ended.
MSI (s) (84:A4) [20:11:42:264]: Executing op: ActionStart(Name=CA_ConfigInsertPeerCertFile,Description=Inserting peer cert. file into configuration,)
Action 20:11:42: CA_ConfigInsertPeerCertFile. Inserting peer cert. file into configuration
MSI (s) (84:A4) [20:11:42:264]: Executing op: CustomActionSchedule(Action=CA_ConfigInsertPeerCertFile,ActionType=11265,Source=BinaryData,Target=**********,CustomActionData=**********)
MSI (s) (84:34) [20:11:42:264]: Invoking remote custom action. DLL: C:\Windows\Installer\MSICE38.tmp, Entrypoint: ConfigInsertPeerCertFile
INFO: Custom action 'ConfigInsertPeerCertFile' successfully initialized.
INFO: Successful GET property 'P_MODULES_DIR' with value - C:\Users\Thomas\AppData\Local\Temp\EsetRemoteAdminAgent\
INFO: Successful GET property 'P_DB_TYPE' with value - SQLite
INFO: Successful GET property 'P_DB_CONNECTORS_DIR' with value - C:\Users\Thomas\AppData\Local\Temp\EsetRemoteAdminAgent\
INFO: Successful GET property 'P_PRODUCT_NAME' with value - Agent
INFO: Successful GET property 'P_DB_PATH' with value - C:\ProgramData\ESET\RemoteAdministrator\Agent\EraAgentApplicationData\Data\data.db
INFO: Successful GET property 'P_CERT_PATH' with value - C:\Users\Thomas\AppData\Local\Temp\EsetRemoteAdminAgent\peercert.pfx
INFO: Successful GET property 'P_LOAD_CERTS_FROM_FILE_AS_BASE64' with value - YES
INFO: Successful GET property 'P_CERT_PASSWORD' with value - **********
ERROR: (ConfigInsertPeerCertFile) Checking certificate ended with error 'ParsePfxCertificate: PFXImportCertStore failed with Das angegebene Netzwerkkennwort ist falsch. Error code: 0x56'. Path provided - 'C:\Users\Thomas\AppData\Local\Temp\EsetRemoteAdminAgent\peercert.pfx'
INFO: Successful GET property 'P_SILENT' with value - UILevel=4
INFO: Custom action 'ConfigInsertPeerCertFile' ended.
CustomAction CA_ConfigInsertPeerCertFile returned actual error code 1603 (note this may not be 100% accurate if translation happened inside sandbox)
Action ended 20:11:42: InstallExecute. Return value 3.

 

Then i tried to export the certs and installed the agent manually. This worked and the agent service is running. But it does not connect to the server.

The tace.log shows this:

2015-08-31 18:22:14 Information: CAgentSecurityModule [Thread 1e20]: Agent peer certificate with subject 'CN=Agent Zertifikat ERA Agent, O=xxx, L=xxx, S=xxx, C=xx' issued by 'CN=xxx, O=xxx, L=xxx, S=xxx, C=xx' with serial number '01ce8a559032cc4d2497df78b10ad8d5f501' is and will be valid in 30 days
2015-08-31 18:22:14 Information: Kernel [Thread 470]: Used memory after modules start-up is 27128 KB
2015-08-31 18:22:19 Error: CAgentSecurityModule [Thread 1e20]: Certificated user verification failed with: NodVerifyCertificateChain failed: NodVerifyTrustResult: 6, NVT_NotTrustedRoot, X509ChainStatus: 0x10000, X509CSF_PartialChain
2015-08-31 18:22:19 Error: NetworkModule [Thread 1c64]: Receive: NodSslWriteEncryptedData: Handshake failed to complete., ResolvedIpAddress:xxx, ResolvedHostname:, ResolvedPort:2222
2015-08-31 18:22:19 Error: NetworkModule [Thread 1c64]: Protocol failure for session id 1, error:Receive: NodSslWriteEncryptedData: Handshake failed to complete.
2015-08-31 18:22:19 Error: CReplicationModule [Thread 328]: CReplicationManager: Replication (network) connection to 'host: "xxx" port: 2222' failed with: Receive: NodSslWriteEncryptedData: Handshake failed to complete.
2015-08-31 18:23:05 Error: CAgentSecurityModule [Thread 1f88]: Certificated user verification failed with: NodVerifyCertificateChain failed: NodVerifyTrustResult: 6, NVT_NotTrustedRoot, X509ChainStatus: 0x10000, X509CSF_PartialChain
2015-08-31 18:23:05 Error: NetworkModule [Thread 1c64]: Receive: NodSslWriteEncryptedData: Handshake failed to complete., ResolvedIpAddress:xxx, ResolvedHostname:, ResolvedPort:2222
2015-08-31 18:23:05 Error: NetworkModule [Thread 1c64]: Protocol failure for session id 2, error:Receive: NodSslWriteEncryptedData: Handshake failed to complete.
2015-08-31 18:23:05 Error: CReplicationModule [Thread 1b38]: CReplicationManager: Replication (network) connection to 'host: "xxx" port: 2222' failed with: Receive: NodSslWriteEncryptedData: Handshake failed to complete.

 

[tomha 3]

Update:

After upgrade to ERA 6.2 Live Installer works as expected.