CORTEX XDR Installation Error 1067

Showing results for 
Show  only  | Search instead for 
Did you mean: 

CORTEX XDR Installation Error 1067

L3 Networker

I am not able to install COrtex XDR in a WIN10 computer;



When we try to start the service below we received error message 1067



Hi there.  Out of curiosity, have you tried to launch a command prompt as an administrator and kick off the MSI from there?  The 1603 error in the logs makes me lean this direction.  Also, TAC should be able to resolve this one quickly.  Have you tried reaching out to Support?

David Falcon 
Senior Solutions Architect, Cortex
Palo Alto Networks® 

L1 Bithead

Sorry Expert, I have same issue.

The Cortex XDR agents appears pop up same like above, but after I tried to uninstall XDR agent, the process is stuck.

I tried to generate logs for TAC support, but cytray/icon XDR console is not showing.


Please help me how to Can I generate support log XDR if the cytray not appears.

L3 Networker

sounds like you need to run the agent cleaner on the asset first, then reboot and you should be good to go. 

L1 Bithead

How can do that? do u have tutorial for that?

Hi @Muhammad-Rusli Looks like there are two parts to your problem:

  1. Generating a support file
  2. Uninstalling an agent


Generating a Support File

You can generate support file from the XDR console . You can do it from the Endpoint Administration page or from Action Center.

1. Navigate to Endpoints -> Endpoint Management -> Endpoint Administration.

2. Right-click on the affected endpoint, navigate to Endpoint -> Endpoint Control -> Retrieve Support File





The process to retrieve a support file from the Action Center is described here:


Uninstalling an agent

Please create a Support ticket at the Customer Support Portal (link), with the Support File. The TAC Engineer will advise you accordingly on the uninstallation process.


Hope this helps!



Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!