Issue
When running the Enterprise Console version 5.x installer the 'System Property Checks - Sophos Enterprise Console has checked the properties of your system.' screen returns one or more warnings and/ or errors.
First seen in
Enterprise Console 5.0.0
Cause
See specific warning/ error below for explanation.
What to do
This article explains all of the checks that the Sophos Enterprise Console version 5.x installer makes prior to installation or upgrade. These pre-install checks ensure that your install or upgrade will go smoothly. Please select the failure message you wish to troubleshoot or gain guidance on from the list below.
NOTE: The installer logs the success or failure of the checks performed to the 'Sophos_bootstrapper <DATE> <TIME>.log' file. This file is located in the installing users temporary directory. This can typically be viewed by performing the following: Start | Run | Type: %temp% | Press return.
ActivatedOS
| Succeed message |  The operating system is activated |
| Failure message |  The operating system is not activated |
| Unknown result |  Cannot determine whether the operating system is activated |
| CheckName | ActivatedOS |
| IsFatal | Yes |
| Applies to role | Console, Server, Database |
| Applies to | Install, Modify, Upgrade |
| What to do | The operating system must be activated before you run the installer |
ComputerBrowserRunning
| Succeed message | The Computer Browser service is running |
| Failure message |  The Computer Browser service is not running on this computer. The ""discover computers"" feature will not work correctly |
| Unknown result | Cannot determine whether the Computer Browser service is running |
| CheckName | ComputerBrowserRunning |
| IsFatal | No |
| Applies to role | Server |
| Applies to | Install, Modify |
| What to do | Computer Browser service should be running on the management server machine in order for all aspects of the computer discovery functionality to work |
ImpersonateAccounts
| Succeed message | The SYSTEM account can impersonate other accounts |
| Failure message | The SYSTEM account cannot impersonate other accounts |
| Unknown result | Cannot determine whether the SYSTEM account can impersonate other accounts |
| CheckName | ImpersonateAccounts |
| IsFatal | Yes |
| Applies to role | Server |
| Applies to | Install, Modify, Upgrade |
| What to do | System account must be able to impersonate other accounts. This is required as the Sophos Management Service impersonates the database user to connect to the Sophos database |
LocalHostNameLength
| Succeed message | The computer name does not exceed 15 characters |
| Failure message | The computer name exceeds 15 characters. The name might appear truncated in the Management Console |
| Unknown result | N/A |
| CheckName | LocalHostNameLength |
| IsFatal | No |
| Applies to role | Server, Database |
| Applies to | Install, Modify, Upgrade |
| What to do | Computer name should be less than 16 characters in length |
NetworkAdapters
| Succeed message | The computer has only one network adapter |
| Failure message | The computer has multiple network adapters. The Management Server may not be able to process messages |
| Unknown result | Cannot determine whether the computer has multiple network adapters |
| CheckName | NetworkAdapters |
| IsFatal | No |
| Applies to role | Server, Database |
| Applies to | Install, Modify, Upgrade |
| What to do | It is likely that this warning will not require any action. The Sophos Message Router (RouterNT.exe) hosts an Interoperable Object Reference (IOR) on TCP port 8192. This IOR contains among other things the IP addresses of the machine. Clients establishing a connection to the server as part of RMS read this IOR string to determine where to connect back to and on which port (by default 8194). When a machine has multiple IP addresses, the clients connecting will attempt to connect to each of these IPs in order which can cause a delay in setting up the connection. If clients from multiple networks are to be managed by SEC, then the IOR may need to contain multiple addresses such that clients in both networks are able to connect back to the server on port 8914. In which case there is nothing to do. If however all of the clients to be managed by SEC exist in the one network, it may be considered optimal to configure the router to only host the relevant IP in the IOR. It may only be appropriate to change the configuration if there are many IP addresses assigned to the machine and as a result the clients may take longer to connect. Please see article 111862 for details on how to configure RouterNT.exe |
NoEMConsole
| Succeed message | Sophos EM Console is not installed |
| Failure message | Sophos EM Console is installed |
| Unknown result | N/A |
| CheckName | NoEMConsole |
| IsFatal | Yes |
| Applies to role | Console, Server, Database |
| Applies to | Install, Modify, Upgrade |
| What to do | Sophos EM Console must not be installed on this computer. Please uninstall this product before continuing |
NoEMLibrary
| Succeed message | Sophos EM Library is not installed |
| Failure message | Sophos EM Library is installed |
| Unknown result | N/A |
| CheckName | NoEMLibrary |
| IsFatal | Yes |
| Applies to role | Server |
| Applies to | Install, Modify, Upgrade |
| What to do | Sophos EM Library must not be present on this computer. Please uninstall this product before continuing |
NotHelpDesk
| Succeed message | Sophos Helpdesk Console is not installed |
| Failure message | Sophos Helpdesk Console is installed |
| Unknown result | N/A |
| CheckName | NotHelpDesk |
| IsFatal | Yes |
| Applies to role | Server |
| Applies to | Install, Modify, Upgrade |
| What to do | Sophos Helpdesk Console must not be present on this computer. Please uninstall this product before continuing |
NotNac
| Succeed message | Sophos NAC 3.7 or earlier is not installed |
| Failure message | An incompatible version of Sophos NAC is installed on this computer. Please upgrade it before continuing |
| Unknown result | Cannot determine wheter Sophos NAC is installed on this computer. If Sophos NAC 3.7 or earlier is installed, please upgrade it before continuing |
| CheckName | NotNac |
| IsFatal | Yes |
| Applies to role | Server |
| Applies to | Install, Modify |
| What to do | Incompatible version of NAC must not be installed on this computer. Please uninstall this product before continuing |
NotOldVersionSEC
| Succeed message | Sophos Enterprise Console 3.x or earlier is not installed |
| Failure message | Sophos Enterprise Console X is installed. Please upgrade to Sophos Enterprise Console 4 before continuing |
| Unknown result | Cannot determine whether Sophos Enterprise Console 3.x or earlier is installed |
| CheckName | NotOldVersionSEC |
| IsFatal | Yes |
| Applies to role | Console, Server, Database |
| Applies to | Install, Modify, Upgrade |
| What to do | Sophos Enterprise Console versions 1.x, 2.0 or 3.x must not be installed on this computer. Please uninstall this product before continuing |
NotSbe
| Succeed message | Sophos Control Center 2 is not installed |
| Failure message | Sophos Control Center 2 is installed. Please uninstall it before continuing |
| Unknown result | N/A |
| CheckName | NotSbe |
| IsFatal | Yes |
| Applies to role | Console, Server, Database |
| Applies to | Install, Modify, Upgrade |
| What to do | Sophos Control Center 2.x must not be installed on this computer. Please uninstall this product before continuing |
NotScc
| Succeed message | Sophos Control Center 4 is not installed |
| Failure message | Sophos Control Center 4 is installed. Please uninstall it before continuing |
| Unknown result | N/A |
| CheckName | NotScc |
| IsFatal | Yes |
| Applies to role | Console, Server, Database |
| Applies to | Install, Modify, Upgrade |
| What to do | Sophos Control Center 4.x must not be installed on this computer. Please uninstall this product before continuing |
NotScfAndDatabaseOnly
| Succeed message | Sophos Client Firewall is not installed |
| Failure message | Sophos Client Firewall is running. This will prevent SQL instances from being accessible over the network |
| Unknown result | Cannot determine whether Sophos Client Firewall is installed |
| CheckName | NotScfAndDatabaseOnly |
| IsFatal | No |
| Applies to role | Database |
| Applies to | Install, Modify, Upgrade |
| What to do | Please ensure that the Sophos Client Firewall does not prevent the Sophos Management Service (mgntsvc.exe) which is running on the Sophos Management server connecting to the SQL instance hosting the Sophos database. |
NotSGCenter
| Succeed message | Sophos SafeGuard Management Center is not installed |
| Failure message | Sophos SafeGuard Management Center is installed. Please uninstall it before continuing |
| Unknown result | Cannot determine whether Sophos SafeGuard Management Center is already installed. If it is installed, please uninstall it before continuing |
| CheckName | NotSGCenter |
| IsFatal | Yes |
| Applies to role | Server |
| Applies to | Install, Modify, Upgrade |
| What to do | Sophos Safeguard Center must not be installed on this computer. Please uninstall this product before continuing |
NotSGClient
| Succeed message | Sophos SafeGuard Client is not installed |
| Failure message | Sophos SafeGuard Client is installed. Please uninstall it before continuing |
| Unknown result | Cannot determine whether Sophos SafeGuard Client is installed. If it is installed, please uninstall it before continuing |
| CheckName | NotSGClient |
| IsFatal | Yes |
| Applies to role | Server |
| Applies to | Install, Modify, Upgrade |
| What to do | Sophos Safeguard Client must not be installed on this computer. Please uninstall this product before continuing |
NotSGClientRuntime
| Succeed message | Sophos SafeGuard Runtime Client is not installed |
| Failure message | Sophos SafeGuard Runtime Client is installed. Please uninstall it before continuing with the installation |
| Unknown result | Cannot determine whether Sophos SafeGuard Runtime Client is installed. If it is installed, please uninstall it before continuing |
| CheckName | NotSGClientRuntime |
| IsFatal | Yes |
| Applies to role | Server |
| Applies to | Install, Modify, Upgrade |
| What to do | Sophos Safeguard Client Runtime must not be installed on this computer. Please uninstall this product before continuing |
NotSGPolicy
| Succeed message | Sophos SafeGuard Policy Editor is not installed |
| Failure message | Sophos SafeGuard Policy Editor is installed. Please uninstall it before continuing |
| Unknown result | Cannot determine if Sophos SafeGuard Policy Editor is installed. If it is installed, please uninstall it before continuing |
| CheckName | NotSGPolicy |
| IsFatal | Yes |
| Applies to role | Server |
| Applies to | Install, Modify, Upgrade |
| What to do | Sophos Safeguard Policy Editor must not be installed on this computer. Please uninstall this product before continuing |
NotSGServer
| Succeed message | Sophos SafeGuard Server is not installed |
| Failure message | Sophos SafeGuard Server is installed. Please uninstall it before continuing |
| Unknown result | Cannot determine if Sophos SafeGuard Server is installed. If it is installed, please uninstall it before continuing |
| CheckName | NotSGServer |
| IsFatal | Yes |
| Applies to role | Server |
| Applies to | Install, Modify, Upgrade |
| What to do | Sophos Safeguard Server must not be installed on this computer. Please uninstall this product before continuing |
NotSGWebHelpDesk
| Succeed message | Sophos SafeGuard WebHelpDesk is not installed |
| Failure message | Sophos SafeGuard WebHelpDesk is installed. Please uninstall it before continuing |
| Unknown result | Cannot determine if Sophos SafeGuard is installed. If it is installed, please uninstall it before continuing |
| CheckName | NotSGWebHelpDesk |
| IsFatal | Yes |
| Applies to role | Server |
| Applies to | Install |
| What to do | Sophos Safeguard WebHelpDesk must not be installed on this computer. Please uninstall this product before continuing |
NotSUM
| Succeed message | Sophos Update Manager is not installed |
| Failure message | Sophos Update Manager is already installed. Please uninstall it before continuing |
| Unknown result | N/A |
| CheckName | NotSUM |
| IsFatal | Yes |
| Applies to role | Server |
| Applies to | Install, Modify |
| What to do | Sophos Update Manager must not be installed on this computer prior to installation. Please uninstall this product before continuing |
OSVersionAboveWindows2000
| Succeed message | The operating system is supported by Sophos Enterprise Console |
| Failure message | Windows 2000 and earlier are no longer supported. Please update your computer before you install Sophos Enterprise Console |
| Unknown result | Cannot determine whether the operating system is supported by Sophos Enterprise Console |
| CheckName | OSVersionAboveWindows2000 |
| IsFatal | Yes |
| Applies to role | Console, Server, Database |
| Applies to | Install, Modify, Upgrade |
| What to do | The operating system version must be Windows XP, Windows 2003 or later. For supported platforms please see 113278 |
PendingReboots
| Succeed message | The computer does not need to be restarted |
| Failure message | We recommend that you restart the computer before installing Sophos Enterprise Console |
| Unknown result | Cannot determine whether the computer needs to be restarted before installing Sophos Enterprise Console |
| CheckName | PendingReboots |
| IsFatal | No |
| Applies to role | Server |
| Applies to | Install |
| What to do | Computer should not have a pending reboot. We recommend you reboot the computer before continuing The check looks at HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\PendingFileRenameOperations to determine if the computer needs to be restarted before installing |
PrimaryDiskSpace
| Succeed message | The system drive has sufficient free disk space |
| Failure message | We recommend at least 5 GB free disk space to support Sophos downloads |
| Unknown result | Cannot determine the system drive disk space. We recommend at least 5 GB free disk space on the primary drive before installation |
| CheckName | PrimaryDiskSpace |
| IsFatal | No |
| Applies to role | Server |
| Applies to | Install |
| What to do | This computer should have at least 5GB free disk space on the primary drive. A default installation may be required to install a number of pre-requisites such as .Net Framework and SQL Server 2008; by default they would installed to the primary drive. Also the number of subscriptions and distribution locations could vary from install to install. If disk space is a concern, Sophos recommends that you manually install a SQL instance specifying alternative drives for the data and logs. It may also be worth considering deploying additional distribution points to a remote file server or installing an additional Sophos Update Manager on another computer. |
RamSize
| Succeed message | The computer has at least 2 GB RAM |
| Failure message | We recommend at least 2 GB RAM for the best experience |
| Unknown result | Cannot determine whether the computer has at least 2 GB RAM |
| CheckName | RamSize |
| IsFatal | No |
| Applies to role | Server |
| Applies to | Install, Modify, Upgrade |
| What to do | Computer should have more than 2GB RAM. Sophos recommends at least 2GB RAM for the best experience |
RMSClientNotDetected
| Succeed message | Sophos Remote Management System is not installed |
| Failure message | Cannot install the Management Server component because Sophos Remote Management System is already installed |
| Unknown result | Cannot determine whether Sophos Remote Management System has already been installed |
| CheckName | RMSClientNotDetected |
| IsFatal | Yes |
| Applies to role | Server |
| Applies to | Install |
| What to do | The Remote Management System (RMS) client must not be installed on this computer prior to the installation of Sophos Enterprise Console. The management server cannot be installed when RMS is already installed on the system. Please uninstall this component before continuing |
RunningOnWindows2008
| Succeed message | The operating system can support more than 5000 clients |
| Failure message | The operating system cannot support more than 5000 clients |
| Unknown result | Cannot determine the maximum number of clients supported by this operating system. The maximum supported in Windows 2008 is 5000 |
| CheckName | RunningOnWindows2008 |
| IsFatal | No |
| Applies to role | Server |
| Applies to | Install, Modify, Upgrade |
| What to do | Please see article 14243 for more information on how to increase the number of ephemeral ports the operating system can assign to older operating systems |
SECRunning
| Succeed message | Sophos Enterprise Console is not running on this computer |
| Failure message | Sophos Enterprise Console is currently running on this computer. Please stop it before continuing |
| Unknown result | Cannot determine whether Sophos Enterprise Console is running on this computer. If it is running, please stop it before continuing |
| CheckName | SECRunning |
| IsFatal | Yes |
| Applies to role | Console |
| Applies to | Modify, Upgrade |
| What to do | Sophos Enterprise Console must not be running. Please close this product before continuing |
SEMRunning
| Succeed message | Sophos Enterprise Manager is not running |
| Failure message | Sophos Enterprise Manager is currently running. Please stop it before continuing |
| Unknown result | Cannot determine whether Sophos Enterprise Manager is running on the computer. If it is running, please stop it before continuing |
| CheckName | SEMRunning |
| IsFatal | Yes |
| Applies to role | Console |
| Applies to | Install, Modify, Upgrade |
| What to do | Sophos Enterprise Manager must not be running. Please close this product before continuing |
SimpleFileSharing
| Succeed message | Simple File Sharing is disabled |
| Failure message | Simple File Sharing is enabled. Please disable it before continuing |
| Unknown result | Cannot determine whether Simple File Sharing is enabled. If it is enabled, please disable it before continuing |
| CheckName | SimpleFileSharing |
| IsFatal | Yes |
| Applies to role | Console, Server, Database |
| Applies to | Install, Modify, Upgrade |
| What to do | Simple file sharing must be disabled |
SqlBrowserRunning
| Succeed message | The SQL Server Browser service is running |
| Failure message | The SQL Server Browser service is not running. This will prevent a remote Management Server from connecting to the database |
| Unknown result | Cannot determine whether SQL Server Browser service is running |
| CheckName | SqlBrowserRunning |
| IsFatal | No |
| Applies to role | Database |
| Applies to | Install, Modify, Upgrade |
| What to do | SQL browser service should be running in order for the management service to locate the Sophos database instance |
SupportedOS
| Succeed message | This computer has the correct operating system service pack installed |
| Failure message | Sophos Enterprise Console needs Service Pack %SP% for %WINDOWS%. Please install it before continuing with the installation |
| Unknown result | Cannot determine whether the operating system is supported by Sophos Enterprise Console |
| CheckName | SupportedOS |
| IsFatal | Yes |
| Applies to role | Console, Server, Database |
| Applies to | Install, Modify, Upgrade |
| What to do | Support operating system version and service pack must be installed. For supported platforms please see 113278 |
UserIsAdministrator
| Succeed message | You are an administrator on this computer |
| Failure message | You do not have sufficient rights to run the installer |
| Unknown result | Cannot determine whether you have sufficient rights to run the installer |
| CheckName | UserIsAdministrator |
| IsFatal | Yes |
| Applies to role | Console, Server, Database |
| Applies to | Install, Modify, Upgrade |
| What to do | User must be an administrator on this computer to perform the installation. Please log on to the computer as an administrator and run the installer again |
DomainController
| Succeed message | The computer is not a domain controller |
| Failure message | The computer is a domain controller. We recommend installing the software on a non domain controller computer |
| Unknown result | Cannot determine whether the computer is a domain controller |
| CheckName | DomainController |
| IsFatal | No |
| Applies to role | Console, Server, Database |
| Applies to | Install, Modify, Upgrade |
| What to do | It is recommended, for security reasons, that Enterprise Console is not installed on a Domain Controller. A problem that may be encountered on install due to hardening a DC could be: KBA 116437. |
WindowsInstaller45
| Succeed message | Windows Installer 4.5 is installed. |
| Failure message | Creation of a new SOPHOS SQL Server instance is not supported because Windows Installer 4.5 is not installed. An existing SQL Server instance must be used |
| Unknown result | N/A |
| CheckName | WindowsInstaller45 |
| IsFatal | No |
| Applies to role | Database |
| Applies to | Install |
| What to do | Download version 4.5 of Windows Installer from Microsoft. Alternatively you can find the relevant version for your platform in the \pre-reqs\Windows Installer 4.5\ directory as unpacked to by the downloaded SFX. For example on 32-bit Windows 2003, the file required would be: C:\sec_50\ServerInstaller\pre-reqs\Windows Installer 4.5\2003\x86\WindowsServer2003-KB942288-v4-x86.exe
|
DotNetInPrereqfolder
| Succeed message | .NET 3.5 is located in the pre-req folder |
| Failure message | .NET 3.5 is not installed and the executable is not in the pre-reqs folder. Please install it before continuing |
| Unknown result | Cannot determine whether .NET executable is located in the pre-req folder |
| CheckName | DotNetInPrereqfolder |
| IsFatal | Yes |
| Applies to role | Console, Server, Database |
| Applies to | Install, Upgrade |
| What to do | The .Net executable must be in the pre-req folder if version 3.5 is not installed and it is required for SEC installation. Otherwise it will fail while trying to install it.
|
Windows2008SP1WithoutDotNet
| Succeed message | Unavailable |
| Failure message | Microsoft .NET 3.5 SP1 must be installed and the computer must be restarted before continuing with the installation. Microsoft .NET 3.5 SP1 is provided in the installer's pre-reqs folder. |
| Unknown result | Unavailable |
| CheckName | Windows2008SP1WithoutDotNet |
| IsFatal | Yes |
| Applies to role | Server, Database |
| Applies to | Install, Upgrade |
| What to do | Please see article 114294 for more information.
|
LoggedOnUserCanAccessDatabase
| Succeed message | The logon user can access the database |
| Failure message | The logon user cannot access the database created during a previous installation |
| Unknown result | N/A |
| CheckName | LoggedOnUserCanAccessDatabase |
| IsFatal | Yes |
| Applies to role | Database |
| Applies to | Upgrade |
| What to do | During an upgrade, the logged on user must have access to the database created in the previous installation.
If you are using a nameless (default) SQL instance, see article 116694. |
OrphanDatabase
| Succeed message | None |
| Failure message | The Management Server does not use the database installed on this computer. Please uninstall the database from this computer before continuing. |
| Unknown result | None |
| CheckName | OrphanDatabase |
| IsFatal | Yes |
| Applies to role | Server |
| Applies to | Modify |
| What to do | If you attempt to modify an existing server installation (the server role is already installed) this error will appear if the server points to a remote database and there is an previous Sophos database on the local system. In order to proceed you must remove the local database before running the installation again. If required please backup the database before removing it. .
|
