search cancel

Symantec Endpoint Protection Signature verification FAILED for Index File Content


Article ID: 151345


Updated On:


Endpoint Protection


Symantec Endpoint Protection (SEP) clients are not able to receive virus definitions or policy information from Symantec Endpoint Protection Manager (SEPM) after a re-installation.

The Symantec Endpoint Protection (SEP) client is not able to communicate with the Symantec Endpoint Protection Manager (SEPM) server.
After running sylinkwatcher.exe you find SMS return=200, and error "Signature verification FAILED for Index File Content"



The folders in "C:\Program Files\Symantec\Symantec Endpoint Protection Manager\data\outbox\agent" for the old SEPM are associated with the clients in the previous installation and only work with old clients.
New folders are created during re-installation of Symantec Endpoint Protection Manager (SEPM) server using the same path as the older installation and will not allow authentication of old clients.


To correct this issue, follow the below steps:

Solution 1

  1. Open Symantec Endpoint Protection Manager console.
  2. Click Clients  (This is labeled Computers in the Small Business Edition.)
  3. Click on the group where the problem clients are located.
  4. Delete any clients that are not getting updates.
    1. Right-click the client.
    2. Select Delete from the menu.

Solution 2

  1. Follow the steps in article TECH106288 to Export Communications Settings and replace the Sylink file using SylinkDrop.exe.
    Note: If signature verification fails for a large group of clients, please see article TECH93740.

The client will now show in the Symantec Endpoint Protection Manager on the next heartbeat and start updating again.

Alternatively you can go to the client and force a check-in.

  1. Open the client interface from the client.
  2. Click Help and Support > Troubleshooting > Update.