Update from Traps to Cortex

Showing results for 
Show  only  | Search instead for 
Did you mean: 

Update from Traps to Cortex

L1 Bithead

Hello everyone,

I'm trying to update the Traps agent 5.0.11 to Cortex 7.4.0 on Windows Server 2008/2008R2.

When I'm installing the new version, in the moment to start the services, the installation go in rollback.

I've tried to install directly the new version.

Unistall Traps,  clean with XDR agent cleaner and install the new version, same problem.

I'm able to install only Traps 5.0.11, with protection disabled, but connected to console.

Have you got some suggestions?


I've controlled the permission of the user and seems to me that it has the right privilege.

these are the log i got from event viewer of Windows


Log Name: System
Source: Service Control Manager
Date: 27.01.2022 12:33:35
Event ID: 7000
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: MyServer.Domain
The cyvrmtgn service failed to start due to the following error:
Windows cannot verify the digital signature for this file. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="49152">7000</EventID>
<TimeCreated SystemTime="2022-01-27T11:33:35.055852400Z" />
<Correlation />
<Execution ProcessID="1056" ThreadID="3788" />
<Security />
<Data Name="param1">cyvrmtgn</Data>
<Data Name="param2">%%577</Data>



Log Name: Application
Source: MsiInstaller
Date: 27.01.2022 10:11:37
Event ID: 1033
Task Category: None
Level: Information
Keywords: Classic
User: DomainAdmin
Computer: MyServer.Domain
Windows Installer installed the product. Product Name: Cortex XDR Product Version: Product Language: 1033. Manufacturer: Palo Alto Networks, Inc.. Installation success or error status: 1603.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<Provider Name="MsiInstaller" />
<EventID Qualifiers="0">1033</EventID>
<TimeCreated SystemTime="2022-01-27T09:11:37.000000000Z" />
<Security UserID="S-1-5-21-861567501-484061587-725345543-500" />
<Data>Cortex XDR</Data>
<Data>Palo Alto Networks, Inc.</Data>

I've tried also with localadmin of server, but i've always the error at the moment to start new services (cyvera).

L3 Networker

Dear PierazzoD


"Windows cannot verify the digital signature for this file. " log is clear indication of the problem. You can clean XDR with cleaning tool. For the getting this tool, You need to open a ticket via support portal and then you can try again to install. 


Alternative solution, Required certificates are installing to certificate store when you install XDR. so You may try to DDISABLE_INTEGRITY_CHECKS with bcdedit. Try to upgrade and restore to old configs (enable integrity check). Btw, I've never tried this before and thats why I'm gonna recommend open a support request again. 

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!