search cancel

Symantec Endpoint Protection Signature verification FAILED for Index File Content

book

Article ID: 151345

calendar_today

Updated On:

Products

Endpoint Protection

Issue/Introduction

Symantec Endpoint Protection (SEP) clients are not able to receive virus definitions or policy information from Symantec Endpoint Protection Manager (SEPM) after a re-installation.

Symptoms
The Symantec Endpoint Protection (SEP) client is not able to communicate with the Symantec Endpoint Protection Manager (SEPM) server.
After running sylinkwatcher.exe you find SMS return=200, and error "Signature verification FAILED for Index File Content"


 

Cause

The folders in "C:\Program Files\Symantec\Symantec Endpoint Protection Manager\data\outbox\agent" for the old SEPM are associated with the clients in the previous installation and only work with old clients.
New folders are created during re-installation of Symantec Endpoint Protection Manager (SEPM) server using the same path as the older installation and will not allow authentication of old clients.

Resolution

To correct this issue, follow the below steps:

Solution 1

  1. Open Symantec Endpoint Protection Manager console.
  2. Click Clients  (This is labeled Computers in the Small Business Edition.)
  3. Click on the group where the problem clients are located.
  4. Delete any clients that are not getting updates.
    1. Right-click the client.
    2. Select Delete from the menu.

Solution 2

  1. Follow the steps in article TECH106288 to Export Communications Settings and replace the Sylink file using SylinkDrop.exe.
    Note: If signature verification fails for a large group of clients, please see article TECH93740.


The client will now show in the Symantec Endpoint Protection Manager on the next heartbeat and start updating again.

Alternatively you can go to the client and force a check-in.
 

  1. Open the client interface from the client.
  2. Click Help and Support > Troubleshooting > Update.