Symantec Endpoint Protection (Manager or Client) downloads content from LiveUpdate but the content is never applied. Return Code of 1806.

Products

• Endpoint Protection

Issue/Introduction

The Symantec Endpoint Protection Manager (SEPM) or Symantec Endpoint Protection (SEP) client successfully downloads content from its LiveUpdate source server, but does not successfully apply the content.

 

Log.LiveUpdate shows: 

LiveUpdate found 4 updates available, of which 0 were installed and 4 failed to install.  The LiveUpdate session exited with a return code of 1806, LiveUpdate downloaded all of the updates you requested, but was unable to install any of them.

Log.LiveUpdate may also show HTTP 404 errors.
Running LUALL will immediately fail, indicating the file that was requested does not exist.

Resolution

This situation is typically resolved by either clearing out the LiveUpdate cache, or by reinstalling and reregistering LiveUpdate.

To clear out the cache:

 

1. In the Windows Control Panel, open Symantec LiveUpdate.
2. Go to the Update Cache tab.
3. At the bottom, click Remove All Files From Cache.
4. Click OK.

 

 

To reinstall LiveUpdate:

1. Uninstall LiveUpdate
2. Delete the following folders:
  a. C:\Program Files\Symantec\LiveUpdate
  b. C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate
  c. C:\Program Files\Symantec\Symantec Endpoint Protection Manager\Inetpub\content\\*  (delete the numbered folders; ie: 81218007)
3. Install the latest available LiveUpdate 3.3 release (http://www.symantec.com/techsupp/home_homeoffice/products/lu/lu/files.html).  IMPORTANT!  If this is a SEP 12.1 SEPM, the correct version of the LiveUpdate client must be used.  See the links below for detailed instructions.
4. Go to Start -> Run, and execute: "C:\Program Files\Symantec\Symantec Endpoint Protection Manager\bin\lucatalog.exe" -cleanup
  - With quotes, as placed
5. Go to Start -> Run, and execute: "C:\Program Files\Symantec\Symantec Endpoint Protection Manager\bin\lucatalog.exe" -update
  - With quotes, as placed
6. Go to Start > Run, and execute: LUALL
 

LiveUpdate content should now successfully apply.