Issue
When running the Enterprise Console version 5.x installer the 'System Property Checks - Sophos Enterprise Console has checked the properties of your system.' screen returns one or more warnings and/ or errors.
Note: For information on what upgrade paths are possible see: Upgrade Paths to Sophos Enterprise Console
First seen in
Enterprise Console 5.0.0
Cause
See specific warning/ error below for explanation.
What to do
This article explains all of the checks that the Sophos Enterprise Console version 5.x installer makes prior to installation or upgrade. These pre-install checks ensure that your install or upgrade will go smoothly. Please select the failure message you wish to troubleshoot or gain guidance on from the list below.
NOTE: The installer logs the success or failure of the checks performed to the 'Sophos_bootstrapper <DATE> <TIME>.log' file.
For SEC 5.0 this file is located in the installing users temporary directory. This can typically be viewed by performing the following: Start | Run | Type: %temp% | Press return.
For SEC 5.1 this file is located in the 'Management Installer' logs directory This can typically be viewed by performing the following: Start | Run | Type: %ALLUSERSPROFILE%\Sophos\Management Installer\ | Press return.
ActivatedOS
| Succeed message |  The operating system is activated |
| Failure message |  The operating system is not activated |
| Unknown result |  Cannot determine whether the operating system is activated |
| CheckName | ActivatedOS |
| IsFatal | Yes |
| Applies to role | Console, Server, Database |
| Applies to | Install, Modify, Upgrade |
| What to do | The operating system must be activated before you run the installer |
ComputerBrowserRunning
| Succeed message | The Computer Browser service is running |
| Failure message |  The Computer Browser service is not running on this computer. The ""discover computers"" feature will not work correctly |
| Unknown result | Cannot determine whether the Computer Browser service is running |
| CheckName | ComputerBrowserRunning |
| IsFatal | No |
| Applies to role | Server |
| Applies to | Install, Modify |
| What to do | Computer Browser service should be running on the management server machine in order for all aspects of the computer discovery functionality to work |
ImpersonateAccounts
| Succeed message | The SYSTEM account can impersonate other accounts |
| Failure message | The SYSTEM account cannot impersonate other accounts |
| Unknown result | Cannot determine whether the SYSTEM account can impersonate other accounts |
| CheckName | ImpersonateAccounts |
| IsFatal | Yes |
| Applies to role | Server |
| Applies to | Install, Modify, Upgrade |
| What to do | System account must be able to impersonate other accounts. This is required as the Sophos Management Service impersonates the database user to connect to the Sophos database |
LocalHostNameLength
| Succeed message | The computer name does not exceed 15 characters |
| Failure message | The computer name exceeds 15 characters. The name might appear truncated in the Management Console |
| Unknown result | N/A |
| CheckName | LocalHostNameLength |
| IsFatal | No |
| Applies to role | Server, Database |
| Applies to | Install, Modify, Upgrade |
| What to do | Computer name should be less than 16 characters in length |
NetworkAdapters
| Succeed message | The computer has only one network adapter |
| Failure message | The computer has multiple network adapters. The Management Server may not be able to process messages |
| Unknown result | Cannot determine whether the computer has multiple network adapters |
| CheckName | NetworkAdapters |
| IsFatal | No |
| Applies to role | Server, Database |
| Applies to | Install, Modify, Upgrade |
| What to do | It is likely that this warning will not require any action. The Sophos Message Router (RouterNT.exe) hosts an Interoperable Object Reference (IOR) on TCP port 8192. This IOR contains among other things the IP addresses of the machine. Clients establishing a connection to the server as part of RMS read this IOR string to determine where to connect back to and on which port (by default 8194). When a machine has multiple IP addresses, the clients connecting will attempt to connect to each of these IPs in order which can cause a delay in setting up the connection. If clients from multiple networks are to be managed by SEC, then the IOR may need to contain multiple addresses such that clients in both networks are able to connect back to the server on port 8914. In which case there is nothing to do. If however all of the clients to be managed by SEC exist in the one network, it may be considered optimal to configure the router to only host the relevant IP in the IOR. It may only be appropriate to change the configuration if there are many IP addresses assigned to the machine and as a result the clients may take longer to connect. Please see article 111862 for details on how to configure RouterNT.exe |
NoEMConsole
| Succeed message | Sophos EM Console is not installed |
| Failure message | Sophos EM Console is installed |
| Unknown result | N/A |
| CheckName | NoEMConsole |
| IsFatal | Yes |
| Applies to role | Console, Server, Database |
| Applies to | Install, Modify, Upgrade |
| What to do | Sophos EM Console must not be installed on this computer. Please uninstall this product before continuing |
NoEMLibrary
| Succeed message | Sophos EM Library is not installed |
| Failure message | Sophos EM Library is installed |
| Unknown result | N/A |
| CheckName | NoEMLibrary |
| IsFatal | Yes |
| Applies to role | Server |
| Applies to | Install, Modify, Upgrade |
| What to do | Sophos EM Library must not be present on this computer. Please uninstall this product before continuing.
- Ensure EM Library has been uninstalled from Add/Remove Programs.
- After uninstalling EM Library if you still seen the error (Warning: Before using the registry editor read article 10388.):
- In the registry editor check the following key does not mention EM Library:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ - Still in the registry editor the following key does not exist (backup/export registry and remove 'BEAA...' key if necessary):
HKEY_CLASSES_ROOT\Installer\UpgradeCodes\BEAA18A7D70E83E43AB6B919AFB05A87 |
NotHelpDesk
| Succeed message | Sophos Helpdesk Console is not installed |
| Failure message | Sophos Helpdesk Console is installed |
| Unknown result | N/A |
| CheckName | NotHelpDesk |
| IsFatal | Yes |
| Applies to role | Server |
| Applies to | Install, Modify, Upgrade |
| What to do | Sophos Helpdesk Console must not be present on this computer. Please uninstall this product before continuing |
NotNac
| Succeed message | Sophos NAC 3.7 or earlier is not installed |
| Failure message | An incompatible version of Sophos NAC is installed on this computer. Please upgrade it before continuing |
| Unknown result | Cannot determine wheter Sophos NAC is installed on this computer. If Sophos NAC 3.7 or earlier is installed, please upgrade it before continuing |
| CheckName | NotNac |
| IsFatal | Yes |
| Applies to role | Server |
| Applies to | Install, Modify |
| What to do | Incompatible version of NAC must not be installed on this computer. Please uninstall this product before continuing |
NotOldVersionSEC
| Succeed message | Sophos Enterprise Console 3.x or earlier is not installed |
| Failure message | Sophos Enterprise Console X is installed. Please upgrade to Sophos Enterprise Console 4 before continuing |
| Unknown result | Cannot determine whether Sophos Enterprise Console 3.x or earlier is installed |
| CheckName | NotOldVersionSEC |
| IsFatal | Yes |
| Applies to role | Console, Server, Database |
| Applies to | Install, Modify, Upgrade |
| What to do | Sophos Enterprise Console versions 1.x, 2.0 or 3.x must not be installed on this computer. Please uninstall this product before continuing |
NotSbe
| Succeed message | Sophos Control Center 2 is not installed |
| Failure message | Sophos Control Center 2 is installed. Please uninstall it before continuing |
| Unknown result | N/A |
| CheckName | NotSbe |
| IsFatal | Yes |
| Applies to role | Console, Server, Database |
| Applies to | Install, Modify, Upgrade |
| What to do | Sophos Control Center 2.x must not be installed on this computer. Please uninstall this product before continuing |
NotScc
| Succeed message | Sophos Control Center 4 is not installed |
| Failure message | Sophos Control Center 4 is installed. Please uninstall it before continuing |
| Unknown result | N/A |
| CheckName | NotScc |
| IsFatal | Yes |
| Applies to role | Console, Server, Database |
| Applies to | Install, Modify, Upgrade |
| What to do | Sophos Control Center 4.x must not be installed on this computer. Please uninstall this product before continuing |
NotScfAndDatabaseOnly
| Succeed message | Sophos Client Firewall is not installed |
| Failure message | Sophos Client Firewall is running. This will prevent SQL instances from being accessible over the network |
| Unknown result | Cannot determine whether Sophos Client Firewall is installed |
| CheckName | NotScfAndDatabaseOnly |
| IsFatal | No |
| Applies to role | Database |
| Applies to | Install, Modify, Upgrade |
| What to do | Please ensure that the Sophos Client Firewall does not prevent the Sophos Management Service (mgntsvc.exe) which is running on the Sophos Management server connecting to the SQL instance hosting the Sophos database. |
NotSGCenter
| Failure message | Sophos Safeguard Management Center is installed. You will not be able to manage encryption with Sophos Enterprise Console. |
| CheckName | NotSGCenter |
| IsFatal | No |
| Applies to role | Server |
| Applies to | Install, Modify, Upgrade
|
| What to do | See the document: Sophos Disk Encryption - License migration guide available in the Documentation section of the website for more information.
Note: clients running Sophos Safeguard 6.x will need to be uninstalled before installing the version manageable by Enterprise Console. |
NotSGClient
| Failure message | Sophos Safeguard Client is installed. You will not be able to manage encryption with Sophos Enterprise Console. |
| CheckName | NotSGClient |
| IsFatal | No |
| Applies to role | Server
Note: When upgrading a remote console to SEC 5.1with the Safeguard client installed on the computer you may also see this warning. This can be safely ignored. |
| Applies to | Install, Modify, Upgrade
|
| What to do | See the document: Sophos Disk Encryption - License migration guide available in the Documentation section of the website for more information.
Note: clients running Sophos Safeguard 6.x will need to be uninstalled before installing the version manageable by Enterprise Console.
|
NotSGClientRuntime
| Failure message | Sophos Safeguard Runtime Client is installed. You will not be able to manage encryption with Sophos Enterprise Console. |
| CheckName | NotSGClientRuntime |
| IsFatal | No |
| Applies to role | Server |
| Applies to | Install, Modify, Upgrade |
| What to do | See the document: Sophos Disk Encryption - License migration guide available in the Documentation section of the website for more information.
Note: clients running Sophos Safeguard 6.x will need to be uninstalled before installing the version manageable by Enterprise Console.
|
NotSGPolicy
| Failure message | Sophos Safeguard Policy Editor is installed. You will not be able to manage encryption with Sophos Enterprise Console. |
| CheckName | NotSGPolicy |
| IsFatal | No |
| Applies to role | Server |
| Applies to | Install, Modify, Upgrade |
| What to do | See the document: Sophos Disk Encryption - License migration guide available in the Documentation section of the website for more information.
Note: clients running Sophos Safeguard 6.x will need to be uninstalled before installing the version manageable by Enterprise Console.
|
NotSGServer
| Failure message | Sophos Safeguard Server is installed. You will not be able to manage encryption with Sophos Enterprise Console. |
| CheckName | NotSGServer |
| IsFatal | No |
| Applies to role | Server |
| Applies to | Install, Modify, Upgrade |
| What to do | See the document: Sophos Disk Encryption - License migration guide available in the Documentation section of the website for more information.
Note: clients running Sophos Safeguard 6.x will need to be uninstalled before installing the version manageable by Enterprise Console.
|
NotSGWebHelpDesk
| Failure message | Sophos Safeguard Web Helpdesk is installed. You will not be able to manage encryption with Sophos Enterprise Console. |
| CheckName | NotSGWebHelpDesk |
| IsFatal | No |
| Applies to role | Server |
| Applies to | Install |
| What to do | See the document: Sophos Disk Encryption - License migration guide available in the Documentation section of the website for more information.
Note: clients running Sophos Safeguard 6.x will need to be uninstalled before installing the version manageable by Enterprise Console. |
NotSUM
| Succeed message | Sophos Update Manager is not installed |
| Failure message | Sophos Update Manager is already installed. Please uninstall it before continuing |
| Unknown result | N/A |
| CheckName | NotSUM |
| IsFatal | Yes |
| Applies to role | Server |
| Applies to | Install, Modify |
| What to do | Sophos Update Manager must not be installed on this computer prior to installation. Please uninstall this product before continuing |
OSVersionAboveWindows2000
| Succeed message | The operating system is supported by Sophos Enterprise Console |
| Failure message | Windows 2000 and earlier are no longer supported. Please update your computer before you install Sophos Enterprise Console |
| Unknown result | Cannot determine whether the operating system is supported by Sophos Enterprise Console |
| CheckName | OSVersionAboveWindows2000 |
| IsFatal | Yes |
| Applies to role | Console, Server, Database |
| Applies to | Install, Modify, Upgrade |
| What to do | The operating system version must be Windows XP, Windows 2003 or later. For supported platforms please see 113278 |
PendingReboots
| Succeed message | The computer does not need to be restarted |
| Failure message | We recommend that you restart the computer before installing Sophos Enterprise Console |
| Unknown result | Cannot determine whether the computer needs to be restarted before installing Sophos Enterprise Console |
| CheckName | PendingReboots |
| IsFatal | No |
| Applies to role | Server |
| Applies to | Install |
| What to do | Computer should not have a pending reboot. We recommend you reboot the computer before continuing The check looks at HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\PendingFileRenameOperations to determine if the computer needs to be restarted before installing |
PrimaryDiskSpace
| Succeed message | The system drive has sufficient free disk space |
| Failure message | We recommend at least 5 GB free disk space to support Sophos downloads |
| Unknown result | Cannot determine the system drive disk space. We recommend at least 5 GB free disk space on the primary drive before installation |
| CheckName | PrimaryDiskSpace |
| IsFatal | No |
| Applies to role | Server |
| Applies to | Install |
| What to do | This computer should have at least 5GB free disk space on the primary drive. A default installation may be required to install a number of pre-requisites such as .Net Framework and SQL Server 2008; by default they would installed to the primary drive. Also the number of subscriptions and distribution locations could vary from install to install. If disk space is a concern, Sophos recommends that you manually install a SQL instance specifying alternative drives for the data and logs. It may also be worth considering deploying additional distribution points to a remote file server or installing an additional Sophos Update Manager on another computer. |
RamSize
| Succeed message | The computer has at least 2 GB RAM |
| Failure message | We recommend at least 2 GB RAM for the best experience |
| Unknown result | Cannot determine whether the computer has at least 2 GB RAM |
| CheckName | RamSize |
| IsFatal | No |
| Applies to role | Server |
| Applies to | Install, Modify, Upgrade |
| What to do | Computer should have more than 2GB RAM. Sophos recommends at least 2GB RAM for the best experience |
RMSClientNotDetected
| Succeed message | Sophos Remote Management System is not installed |
| Failure message | Cannot install the Management Server component because Sophos Remote Management System is already installed |
| Unknown result | Cannot determine whether Sophos Remote Management System has already been installed |
| CheckName | RMSClientNotDetected |
| IsFatal | Yes |
| Applies to role | Server |
| Applies to | Install |
| What to do | The Remote Management System (RMS) client must not be installed on this computer prior to the installation of Sophos Enterprise Console. The management server cannot be installed when RMS is already installed on the system. Please uninstall this component before continuing.
Note: Setup.exe (the server bootstrapper) checks for registry entries under: HKCR\Installer\UpgradeCodes\. For example: A2ECF5789F971654CBB5476964870E94
to determine if products are already installed. |
RunningOnWindows2008
| Succeed message | SEC 5.0: The operating system can support more than 5000 clients
SEC 5.1: The operating system can support more than 4000 clients |
| Failure message | SEC 5.0: The operating system cannot support more than 5000 clients
SEC 5.1: The operating system cannot support more than 4000 clients |
| Unknown result | SEC 5.0: Cannot determine the maximum number of clients supported by this operating system. The maximum supported in Windows 2008 is 5000
SEC 5.1: Cannot determine the maximum number of clients supported by this operating system. The maximum supported in Windows 2008 is 4000 |
| CheckName | RunningOnWindows2008 |
| IsFatal | No |
| Applies to role | Server |
| Applies to | Install, Modify, Upgrade |
| What to do | Please see article 14243 for more information on how to increase the number of ephemeral ports the operating system can assign to older operating systems |
SECRunning
| Succeed message | Sophos Enterprise Console is not running on this computer |
| Failure message | Sophos Enterprise Console is currently running on this computer. Please stop it before continuing |
| Unknown result | Cannot determine whether Sophos Enterprise Console is running on this computer. If it is running, please stop it before continuing |
| CheckName | SECRunning |
| IsFatal | Yes |
| Applies to role | Console |
| Applies to | Modify, Upgrade |
| What to do | Sophos Enterprise Console must not be running. Please close this product before continuing |
SEMRunning
| Succeed message | Sophos Enterprise Manager is not running |
| Failure message | Sophos Enterprise Manager is currently running. Please stop it before continuing |
| Unknown result | Cannot determine whether Sophos Enterprise Manager is running on the computer. If it is running, please stop it before continuing |
| CheckName | SEMRunning |
| IsFatal | Yes |
| Applies to role | Console |
| Applies to | Install, Modify, Upgrade |
| What to do | Sophos Enterprise Manager must not be running. Please close this product before continuing |
SimpleFileSharing
| Succeed message | Simple File Sharing is disabled |
| Failure message | Simple File Sharing is enabled. Please disable it before continuing |
| Unknown result | Cannot determine whether Simple File Sharing is enabled. If it is enabled, please disable it before continuing |
| CheckName | SimpleFileSharing |
| IsFatal | Yes |
| Applies to role | Console, Server, Database |
| Applies to | Install, Modify, Upgrade |
| What to do | Simple file sharing must be disabled |
SqlBrowserRunning
| Succeed message | The SQL Server Browser service is running |
| Failure message | The SQL Server Browser service is not running. This will prevent a remote Management Server from connecting to the database |
| Unknown result | Cannot determine whether SQL Server Browser service is running |
| CheckName | SqlBrowserRunning |
| IsFatal | No |
| Applies to role | Database |
| Applies to | Install, Modify, Upgrade |
| What to do | SQL browser service should be running in order for the management service to locate the Sophos database instance |
SupportedOS
| Succeed message | This computer has the correct operating system service pack installed |
| Failure message | Sophos Enterprise Console needs Service Pack %SP% for %WINDOWS%. Please install it before continuing with the installation |
| Unknown result | Cannot determine whether the operating system is supported by Sophos Enterprise Console |
| CheckName | SupportedOS |
| IsFatal | Yes |
| Applies to role | Console, Server, Database |
| Applies to | Install, Modify, Upgrade |
| What to do | Support operating system version and service pack must be installed. For supported platforms please see 113278 |
UserIsAdministrator
| Succeed message | You are an administrator on this computer |
| Failure message | You do not have sufficient rights to run the installer |
| Unknown result | Cannot determine whether you have sufficient rights to run the installer |
| CheckName | UserIsAdministrator |
| IsFatal | Yes |
| Applies to role | Console, Server, Database |
| Applies to | Install, Modify, Upgrade |
| What to do | User must be an administrator on this computer to perform the installation. Please log on to the computer as an administrator and run the installer again |
DomainController
| Succeed message | The computer is not a domain controller |
| Failure message | The computer is a domain controller. We recommend installing the software on a non domain controller computer |
| Unknown result | Cannot determine whether the computer is a domain controller |
| CheckName | DomainController |
| IsFatal | No |
| Applies to role | Console, Server, Database |
| Applies to | Install, Modify, Upgrade |
| What to do | It is recommended, for security reasons, that Enterprise Console is not installed on a Domain Controller. This is in part due to Microsoft's recommendation not to install Microsoft SQL Server on a DC. It is also likely that additional security settings have been configured on a DC which could prevent Enterprise Console installing; one such problem is referenced in article: 116437. |
WindowsInstaller45
| Succeed message | Windows Installer 4.5 is installed. |
| Failure message | Creation of a new SOPHOS SQL Server instance is not supported because Windows Installer 4.5 is not installed. An existing SQL Server instance must be used |
| Unknown result | N/A |
| CheckName | WindowsInstaller45 |
| IsFatal | No |
| Applies to role | Database (5.0 only) |
| Applies to | Install |
| What to do | Download version 4.5 of Windows Installer from Microsoft. Alternatively you can find the relevant version for your platform in the \pre-reqs\Windows Installer 4.5\ directory as unpacked to by the downloaded SFX. For example on 32-bit Windows 2003, the file required would be: C:\sec_50\ServerInstaller\pre-reqs\Windows Installer 4.5\2003\x86\WindowsServer2003-KB942288-v4-x86.exe
|
DotNetInPrereqfolder
| Succeed message | .NET 3.5 is located in the pre-req folder |
| Failure message | .NET 3.5 is not installed and the executable is not in the pre-reqs folder. Please install it before continuing |
| Unknown result | Cannot determine whether .NET executable is located in the pre-req folder |
| CheckName | DotNetInPrereqfolder |
| IsFatal | Yes |
| Applies to role | Console, Server, Database |
| Applies to | Install, Upgrade |
| What to do | The .Net executable must be in the pre-req folder if version 3.5 is not installed and it is required for SEC installation. Otherwise it will fail while trying to install it.
|
DotNet4InPrereqfolder
| Succeed message | .NET 4 is located in the pre-req folder |
| Failure message | .NET 4 is not installed and the executable is not in the pre-reqs folder. Please install it before continuing |
| Unknown result | Cannot determine whether .NET executable is located in the pre-req folder |
| CheckName | DotNet4InPrereqfolder |
| IsFatal | Yes |
| Applies to role | Console, Server, Database |
| Applies to | Install, Upgrade |
| What to do | The .NET executable must be in the pre-req folder if version 4 is not installed and it is required for SEC installation. Otherwise it will fail while trying to install it.
|
Windows2008SP1WithoutDotNet
| Succeed message | Unavailable |
| Failure message | Microsoft .NET 3.5 SP1 must be installed and the computer must be restarted before continuing with the installation. Microsoft .NET 3.5 SP1 is provided in the installer's pre-reqs folder. |
| Unknown result | Unavailable |
| CheckName | Windows2008SP1WithoutDotNet |
| IsFatal | Yes |
| Applies to role | Server, Database |
| Applies to | Install, Upgrade |
| What to do | Please see article 114294 for more information.
|
LoggedOnUserCanAccessDatabase
| Succeed message | The logon user can access the database |
| Failure message | The logon user cannot access the database created during a previous installation |
| Unknown result | N/A |
| CheckName | LoggedOnUserCanAccessDatabase |
| IsFatal | Yes |
| Applies to role | Database |
| Applies to | Upgrade |
| What to do | During an upgrade, the logged on user must have access to the database created in the previous installation.
If you are using a nameless (default) SQL instance, see article 116694. |
OrphanDatabase
| Succeed message | None |
| Failure message | The Management Server does not use the database installed on this computer. Please uninstall the database from this computer before continuing. |
| Unknown result | None |
| CheckName | OrphanDatabase |
| IsFatal | Yes |
| Applies to role | Server |
| Applies to | Modify |
| What to do | If you attempt to modify an existing server installation (the server role is already installed) this error will appear if the server points to a remote database and there is an previous Sophos database on the local system. In order to proceed you must remove the local database before running the installation again. If required please backup the database before removing it. .
|
InstallerRunOnce
| Failure message | The computer must be restarted before continuing with the installation. |
| CheckName | InstallerRunOnce |
| IsFatal | Yes |
| Applies to role | Console, Server, Database (SEC 5.1) |
| Applies to | Install, Modify, Upgrade |
| What to do | Reboot and re-run the Enterprise Console installer. |
LoggedOnUserCanConnectToDomainController
| Failure message | Cannot validate the logon user account against the domain controller. |
| CheckName | LoggedOnUserCanConnectToDomainController |
| IsFatal | Yes |
| Applies to role | Server (SEC 5.1) |
| Applies to | Install, Modify, Upgrade |
| What to do | Ensure that your domain controller is started and accessible to your Sophos Management Server.
The check calls DsGetDcNameW to obtain a DC name in order to call NetUserGetInfo against the DC for the user being tested. If ERROR_ACCESS_DENIED or RPC_S_SERVER_UNAVAILABLE is returned this check fails. |
PortFreeForMSMQ
| Succeed message | Microsoft Message Queuing can be installed. |
| Failure message | Microsoft Message Queuing cannot be installed. The port is 1801 is already in use. |
| CheckName | PortFreeForMSMQ |
| IsFatal | Yes |
| Applies to role | Server (Where MSMQ is not already installed and on Windows 2003) (SEC 5.1) |
| Applies to | Install, Modify, Upgrade |
| What to do | Please see article 116488 |
ServerUpgradeChecks
| Succeed message | The server can be upgraded. |
| Failure message | The server cannot be upgraded. The database must be upgraded first.
OR
The server cannot be upgraded. The current credentials do not permit access to the SOPHOS51|SOPHOS52 database. |
| CheckName | ServerUpgradeChecks |
| IsFatal | Yes |
| Applies to role | Server (SEC 5.1+) |
| Applies to | Upgrade |
| What to do | Please upgrade the database role first before running the installer on the management server.
When upgrading a distributed installation, the computer with the database component on should be upgraded first. Running the installer on the computer hosting the database first will create the new empty databases required by the new version of the console, instructions can be found in article 33980.
Note: A list of databases names per version of the console can be found in article 17323.
Once the new empty database have been created on the database computer, run the installer on the management server. As part of the upgrade process, the data from the current database will be moved to the new databases.
If you still receive this message after upgrading the database role, ensure that the logged on user running the upgrade on the management server has sufficient rights on all databases. The user running the management server upgrade should be a member of the 'db_owner' role on each of the Sophos databases (members of the 'sysadmin' fixed server role would have implicitly sufficient rights to all databases). These rights are only required temporary during the upgrade process to check that the new databases have been created and to also perform the migration of the data.
|
UserCanGetAccountInfo
| Failure message | You do not have sufficient rights to access the accounts used in the current installation. |
| CheckName | UserCanGetAccountInfo |
| IsFatal | Yes |
| Applies to role | Console, Server, Database (SEC 5.1) |
| Applies to | Modify, Upgrade |
| What to do | Ensure that the 'database' account being used (As referenced under the key: HKLM\SOFTWARE\Sophos\EE\Management Tools\DatabaseUser\) exists in your domain and the domain controller is available.
This check calls 'NetUserGetInfo' for the 'database' account to ensure it does not return access denied. |
SBERunning
| Succeed message | Sophos Control Center 2 is not running on this computer |
| Failure message | Sophos Control Center 2 is currently running on this computer. Please stop it before continuing |
| Unknown result | Cannot determine whether Sophos Control Center is running on the computer. If it is running, please stop it before continuing |
| CheckName | SBERunning |
| IsFatal | Yes |
| Applies to role | Console, Server, Database |
| Applies to | Install, Modify, Upgrade |
| What to do | Ensure that Sophos Control Center (SBEConsole.exe process) is closed. |
WicInPrereqFolder
| Failure message | The Windows Imaging Component installer is not located in the pre-reqs folder. Please install it before continuing. |
| CheckName | WicInPrereqFolder |
| IsFatal | Yes |
| Applies to role | Console, Server, Database |
| Applies to | Install, Modify, Upgrade |
| What to do | The extracted location of the server installer should contain the files 'wic_x64_enu.exe' and 'wic_x86_enu.exe'. These files should exist in the location: 'C:\sec_52\ServerInstaller\pre-reqs\WindowsImagingComponent\'.
Note: These files are only required when .NET 4 is not already installed on Windows 2003. In later operating systems, Windows Imaging Component (WIC) is part of the operating system |
ComputerOSNotSupported
| Failure message | The computer's operating system is not supported by Sophos Enterprise Console. You can continue with installation at your own risk. |
| CheckName | ComputerOSNotSupported |
| IsFatal | No |
| Applies to role | Console, Server, Database |
| Applies to | Install, Modify, Upgrade |
| What to do | The server installer does not prevent installation on to an unsupported Operating System, E.g. Windows 8. However we strongly recommend you choose a fully supported operating system where required. See article 113278 for more information.
|
DatabaseCannotBeUpgraded
| Failure message | The database cannot be upgraded. SQL versions 2000 or below are not supported |
| CheckName | DatabaseCannotBeUpgraded |
| IsFatal | Yes |
| Applies to role | Server, Database |
| Applies to | Modify, Upgrade |
| What to do | Ensure that the current SQL instance in use by the installation is started. I.e. For a default installation, ensure that the service 'SQL Server (SOPHOS)' is started. For information on how to determine the SQL Server instance in use by the system see article 113030. |