Cb Protection: Error 1260 During Agent Upgrade

[#1]

Environment

• Cb Protection 7.x
• Cb Protection 8.x

Symptoms

• Error similar to the below in an upgrade log.

MSI (s) (D0:8C) [11:42:08:645]: SECREPAIR: UAC not supported and could not take approval from user

MSI (s) (D0:8C) [11:42:08:645]: SECUREREPAIR: SecureRepair Failed. Error code: 4ec3FDE16B4Ā

Error 1260.Windows cannot open this program because it has been prevented by a software restriction policy. For more information, open Event Viewer or contact your system administrator.

Cause

Related to Microsoft Security Update KB2918614

Resolution

Microsoft has outlined a resolution in the following link : http://support.microsoft.com/kb/2918614

It is strongly recommended to backup your registry before proceeding

1. Click Start, click Run, type regedit in the Open box, and then click OK.
2. Locate and then click the following subkey in the registry:
   • HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Installer
3. On the Edit menu, point to New, and then click DWORD Value.
4. Type SecureRepairPolicy for the name of the DWORD, and then press Enter.
5. Right-click SecureRepairPolicy, and then click Modify.
6. In the Value data box, type 2, and then click OK.
7. Locate and then click the following subkey in the registry:
   • HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Installer
8. On the Edit menu, point to New, and then click Key.
9. Type SecureRepairWhitelist for the name of the key, and then press Enter.
10. Double-click the SecureRepairWhitelist key to open it.
11. On the Edit menu, point to New, and then click String Value. Create String Values that contain the product codes (including braces {}) of the products that have to be added to the Safe Recipients list.The NAME of the String Value is the "product code" and the VALUE can be left blank.

Additional Notes

Option 2 (shown above) has been proven to resolve instances of this issue without the need of a reinstall. You can locate the product code/GUID for your specific version of CB Protection by referencing the following article: Carbon Black Protection Product Version GUIDs

Related Content

Backing up your registry