Just Published! Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

Carbon Black Cloud: Sensor Installation Fails- Log Short / No Errors Listed

Carbon Black Cloud: Sensor Installation Fails- Log Short / No Errors Listed

Environment

  • Carbon Black Cloud Sensor: All Versions
  • Microsoft Windows: All Supported Versions

Symptoms

  • Sensor Installation Fails
  • Log has little detail in it/ is small in size (5mb).
  • Example:
    === Verbose logging started: 10/28/2020 11:52:21 Build type: SHIP UNICODE 5.00.10011.00 Calling process: C:\windows\system32\msiexec.exe ===
    MSI (c) (5C:4C) [11:52:21:438]: Resetting cached policy values
    MSI (c) (5C:4C) [11:52:21:438]: Machine policy value 'Debug' is 0
    MSI (c) (5C:4C) [11:52:21:438]: ******* RunEngine:
    ******* Product: c:\temp\installer_vista_win7_win8-64-3.6.0.1791
    ******* Action:
    ******* CommandLine: **********
    MSI (c) (5C:4C) [11:52:21:439]: Client-side and UI is none or basic: Running entire install on the server.
    MSI (c) (5C:4C) [11:52:21:439]: Grabbed execution mutex.
    MSI (c) (5C:4C) [11:52:21:580]: Cloaking enabled.
    MSI (c) (5C:4C) [11:52:21:580]: Attempting to enable all disabled privileges before calling Install on Server
    MSI (c) (5C:4C) [11:52:21:582]: Incrementing counter to disable shutdown. Counter after increment: 0
    MSI (s) (40:48) [11:52:21:610]: Running installation inside multi-package transaction c:\temp\installer_vista_win7_win8-64-3.6.0.1791
    MSI (s) (40:48) [11:52:21:610]: Grabbed execution mutex.
    MSI (s) (40:38) [11:52:21:621]: Resetting cached policy values
    MSI (s) (40:38) [11:52:21:621]: Machine policy value 'Debug' is 0
    MSI (s) (40:38) [11:52:21:621]: ******* RunEngine:
    ******* Product: c:\temp\installer_vista_win7_win8-64-3.6.0.1791
    ******* Action:
    ******* CommandLine: **********
    MSI (s) (40:38) [11:52:21:623]: Note: 1: 2203 2: c:\temp\installer_vista_win7_win8-64-3.6.0.1791 3: -2147287038
    MSI (s) (40:38) [11:52:21:624]: MainEngineThread is returning 2
    MSI (s) (40:48) [11:52:21:627]: User policy value 'DisableRollback' is 0
    MSI (s) (40:48) [11:52:21:627]: Machine policy value 'DisableRollback' is 0
    MSI (s) (40:48) [11:52:21:627]: Incrementing counter to disable shutdown. Counter after increment: 0
    MSI (s) (40:48) [11:52:21:627]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
    MSI (s) (40:48) [11:52:21:628]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
    MSI (s) (40:48) [11:52:21:628]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1
    MSI (c) (5C:4C) [11:52:21:630]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1
    MSI (c) (5C:4C) [11:52:21:630]: MainEngineThread is returning 2
    === Verbose logging stopped: 10/28/2020 11:52:21 ===

Cause

 ".msi" is not specified in the installation command

Resolution

Add .msi to the installation command

Related Content


Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎11-13-2020
Views:
820
Contributors