https://live.paloaltonetworks.com/t5/general-topics/multiple-cortex-xdr-agent-upgrades-failing-with-quot-the/m-p/1259068#M126751 <P data-path-to-node="4">Hi team,</P> <P data-path-to-node="5">We are currently encountering a mass upgrade failure across multiple endpoints during both Auto Upgrade and Manual Server Upgrade attempts. While a single endpoint successfully upgraded using our standard profile and group configuration, the remaining endpoints consistently fail.</P> <P data-path-to-node="6"><STRONG data-index-in-node="0" data-path-to-node="6">Issue Summary:</STRONG></P> <UL data-path-to-node="7"> <LI> <P data-path-to-node="7,0,0"><STRONG data-index-in-node="0" data-path-to-node="7,0,0">Symptom:</STRONG> The upgrade tasks transition to a "Failed" status with the specific error message: <STRONG data-index-in-node="92" data-path-to-node="7,0,0">"The installer has timed out."</STRONG></P> </LI> <LI> <P data-path-to-node="7,1,0"><STRONG data-index-in-node="0" data-path-to-node="7,1,0">Scope:</STRONG> Multiple endpoints are affected within the same policy group, ruling out a general console or profile configuration issue.</P> </LI> <LI> <P data-path-to-node="7,2,0"><STRONG data-index-in-node="0" data-path-to-node="7,2,0">Suspected Root Cause:</STRONG> We suspect local MSI database corruption on the affected endpoints from previous installation cycles, causing the upgrade package to fail when attempting to stop services or verify the existing installation signature.</P> </LI> </UL> <P data-path-to-node="8"><STRONG data-index-in-node="0" data-path-to-node="8">Next Steps &amp; Planned Action:</STRONG> To resolve this efficiently across all affected endpoints, we intend to execute a clean wipe using Palo Alto's official cleaner tool followed by a fresh agent installation. We are currently coordinating with the accounts team to orchestrate this mass deployment via Microsoft Intune.</P> <P data-path-to-node="9">If anyone has successfully pushed a console-side workaround for this specific timeout loop without running a local cleaner script, please share your insights.</P> <P data-path-to-node="10">Thank you!</P> Wed, 15 Jul 2026 08:59:37 GMT Z.Zikri 2026-07-15T08:59:37Z https://live.paloaltonetworks.com/t5/general-topics/multiple-cortex-xdr-agent-upgrades-failing-with-quot-the/m-p/1259068#M126751 <P data-path-to-node="4">Hi team,</P> <P data-path-to-node="5">We are currently encountering a mass upgrade failure across multiple endpoints during both Auto Upgrade and Manual Server Upgrade attempts. While a single endpoint successfully upgraded using our standard profile and group configuration, the remaining endpoints consistently fail.</P> <P data-path-to-node="6"><STRONG data-index-in-node="0" data-path-to-node="6">Issue Summary:</STRONG></P> <UL data-path-to-node="7"> <LI> <P data-path-to-node="7,0,0"><STRONG data-index-in-node="0" data-path-to-node="7,0,0">Symptom:</STRONG> The upgrade tasks transition to a "Failed" status with the specific error message: <STRONG data-index-in-node="92" data-path-to-node="7,0,0">"The installer has timed out."</STRONG></P> </LI> <LI> <P data-path-to-node="7,1,0"><STRONG data-index-in-node="0" data-path-to-node="7,1,0">Scope:</STRONG> Multiple endpoints are affected within the same policy group, ruling out a general console or profile configuration issue.</P> </LI> <LI> <P data-path-to-node="7,2,0"><STRONG data-index-in-node="0" data-path-to-node="7,2,0">Suspected Root Cause:</STRONG> We suspect local MSI database corruption on the affected endpoints from previous installation cycles, causing the upgrade package to fail when attempting to stop services or verify the existing installation signature.</P> </LI> </UL> <P data-path-to-node="8"><STRONG data-index-in-node="0" data-path-to-node="8">Next Steps &amp; Planned Action:</STRONG> To resolve this efficiently across all affected endpoints, we intend to execute a clean wipe using Palo Alto's official cleaner tool followed by a fresh agent installation. We are currently coordinating with the accounts team to orchestrate this mass deployment via Microsoft Intune.</P> <P data-path-to-node="9">If anyone has successfully pushed a console-side workaround for this specific timeout loop without running a local cleaner script, please share your insights.</P> <P data-path-to-node="10">Thank you!</P> Wed, 15 Jul 2026 08:59:37 GMT https://live.paloaltonetworks.com/t5/general-topics/multiple-cortex-xdr-agent-upgrades-failing-with-quot-the/m-p/1259068#M126751 Z.Zikri 2026-07-15T08:59:37Z