jdkoerner Honored Contributor.
Honored Contributor.
2359 views

11.2.1 device update fails if drive is encrypted

When updating encrypted devices to 11.2.1 I get a failure on the install of
'novell-zenworks-fde-sec-11.2.1.221.x86_64.msi'. The
'novell-zenworks-fde-sec-11.2.1.221.x86_64.msi.log' shows the following.

MSI (s) (E0:D0) [07:28:58:219]: Doing action: Error_NeedPassword
Action ended 7:28:58: FSE_MSI_Branding. Return value 1.
Action start 7:28:58: Error_NeedPassword.
MSI (s) (E0:D0) [07:28:58:220]: Product: Novell® Full Disk Encryption --
Please enter the administration password via the property ADMINPWD or
UPGDSCRIPT. The upgrade procedure will now abort.

Please enter the administration password via the property ADMINPWD or
UPGDSCRIPT. The upgrade procedure will now abort.
Action ended 7:28:58: Error_NeedPassword. Return value 3.
Action ended 7:28:58: INSTALL. Return value 3.

(Removed some properties log stuff)

MSI (s) (E0:D0) [07:28:58:230]: Note: 1: 1708
MSI (s) (E0:D0) [07:28:58:230]: Product: Novell® Full Disk Encryption --
Installation failed.

MSI (s) (E0:D0) [07:28:58:230]: Windows Installer installed the product.
Product Name: Novell® Full Disk Encryption. Product Version: 9.6.3.4000.
Product Language: 1033. Manufacturer: SECUDE AG. Installation success or
error status: 1603.

From this info I am guessing the installer is not being passed the admin
password. After the failure I can go back run the msi, enter the admin
password from the 'Emergency Recovery' tab of the device from ZCC and the
install complete correctly.

Server - ZCM 11.2.1 and Internal Database on Win2008R2x64
Client - ZCM 11.2.1 w/MU2 on Win7SP1x64

Jim Koerner

0 Likes
9 Replies
shaunpond Absent Member.
Absent Member.

Re: 11.2.1 device update fails if drive is encrypted

Jim,

OK Jim, you caught us: it doesn't update. Look for an information
update shortly...

--

Shaun Pond


0 Likes
jdkoerner Honored Contributor.
Honored Contributor.

Re: 11.2.1 device update fails if drive is encrypted

Any help if I dump in a SR(quicker access to patch) or is it beyond that
now?

Jim Koerner

"Shaun Pond" <spond@no-mx.forums.novell.com> wrote in message
news:VA.0000fd97.448c16c2@no-mx.forums.novell.com...
> Jim,
>
> OK Jim, you caught us: it doesn't update. Look for an information
> update shortly...
>
> --
>
> Shaun Pond
>
>

0 Likes
shaunpond Absent Member.
Absent Member.

Re: 11.2.1 device update fails if drive is encrypted

Jim,

it's too late for that 🙂 Basically, yeah it's gonna fail, but we've
tested carefully and it doesn't do any harm (yeah, I know). I will be
publishing a TID (when they give me the info) showing how to fix this
manually, and Novell is red-facedly working with our partner Secude on
how to fix this for future updates

--

Shaun Pond


0 Likes
shaunpond Absent Member.
Absent Member.

Re: 11.2.1 device update fails if drive is encrypted

Jim,

in fact, what you have done is as far as I know, the way forward - I've
written a TID based on this and will publish it when I've had it
checked by the ZESM team

--

Shaun Pond


0 Likes
jdkoerner Honored Contributor.
Honored Contributor.

Re: 11.2.1 device update fails if drive is encrypted

What I ended up doing is taking the
novell-zenworks-fde-sec-11.2.1.221.x86_64.msi run it manually on the device
and then deploy the 11.2.1 update.

Then I don't have the 11.2.1 deployment fail , manually install the msi, and
then have to go back and redeploy 11.2.1 to the device so it shows up as
successful. Saves me the second install and reboot.

Jim

"Shaun Pond" <spond@no-mx.forums.novell.com> wrote in message
news:VA.0000fd9f.49269481@no-mx.forums.novell.com...
> Jim,
>
> in fact, what you have done is as far as I know, the way forward - I've
> written a TID based on this and will publish it when I've had it
> checked by the ZESM team
>
> --
>
> Shaun Pond
>
>

0 Likes
shaunpond Absent Member.
Absent Member.

Re: 11.2.1 device update fails if drive is encrypted

Jim,

adding this to the TID...

--

Shaun Pond


0 Likes
jdkoerner Honored Contributor.
Honored Contributor.

Re: 11.2.1 device update fails if drive is encrypted

To close this out I see TID 7010468 is now posted for this issue.

Jim Koerner

"Shaun Pond" <spond@no-mx.forums.novell.com> wrote in message
news:VA.0000fda5.499c6b71@no-mx.forums.novell.com...
> Jim,
>
> adding this to the TID...
>
> --
>
> Shaun Pond
>
>

0 Likes
shaunpond Absent Member.
Absent Member.

Re: 11.2.1 device update fails if drive is encrypted

Jim,

yes, and I stole a lot of the material from your posts 🙂 I did get the
ZESM engineers to check it for accuracy, as well.

--

Shaun Pond


0 Likes
bbeachem Absent Member.
Absent Member.

Re: 11.2.1 device update fails if drive is encrypted

Jim,
You are correct in that if you run the MSI manually with the admin password ahead of time, then the SU will work just fine (as it essentially no-ops out for the FDE-SEC.msi). As Shaun mentioned we've confirmed it doesn't have any side affects if you hav the older FDE-SEC.msi installed with the rest of the agent being 11.2.1 (other than the error message on SU for that device). Functionally you're fine. We'll have this resolved in a future version.
0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.