01-27-2022 12:30 AM
I'm trying to update the Traps agent 5.0.11 to Cortex 7.4.0 on Windows Server 2008/2008R2.
When I'm installing the new version, in the moment to start the services, the installation go in rollback.
I've tried to install directly the new version.
Unistall Traps, clean with XDR agent cleaner and install the new version, same problem.
I'm able to install only Traps 5.0.11, with protection disabled, but connected to console.
Have you got some suggestions?
01-27-2022 12:44 AM
Windows 2008 or Windows 2008R2 is not supported by Cortex XDR 7.4 agent. You need to have at least Windows 2008R2 SP1 for XDR Agent 7.4.
You can verify compatibility from above link. If you are trying to install Windows 2008R2 SP1, Could you try to install with below command. Msiexec will create install.txt file in C drive and please check that file content for failing reason.
msiexec /i Emre_pkg_x64.msi /l*v c:\install.txt
01-27-2022 02:10 AM
01-27-2022 03:06 AM
msiexec is throwing 1603. This is generally related with account permissions that you are trying to install but might be other reasons which described in below article. Also you can check service status from windows event logs. You may have more detailed information.
ExecServiceStartCA: Error 0x80070241: StartServiceW failed
ExecServiceStartCA: Error 0x800705b4: Service failed transition to 4 state (current state 1)
ExecServiceStartCA: Error 0x800705b4: StartServiceWait failed
ExecServiceStartCA: Error 0x800705b4: ServiceStartInternal failed
CustomAction ExecServiceStartCA returned actual error code 1603 (note this may not be 100% accurate if translation happened inside sandbox)
Action ended 10:11:21: InstallFinalize. Return value 3.
MSI (c) (A8:84) [10:11:37:757]: Windows Installer installed the product. Product Name: Cortex XDR 18.104.22.168778. Product Version: 22.214.171.124778. Product Language: 1033. Manufacturer: Palo Alto Networks, Inc.. Installation success or error status: 1603.
01-27-2022 05:34 AM
honestly if your up to date on patches for 2008r2 sp1 and are still getting that error I would run the cleaner reboot and then install that version.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!