Installation fails with critical errors "Registering component with Directory Server" & "Installing CCS Directory Server".

book

Article ID: 159010

calendar_today

Updated On:

Products

Control Compliance Suite Windows

Issue/Introduction

Initial installation and installation of Product Update (PU) or Security Content Update (SCU) fails with below error message:

Critical Errors -
Registering component with Directory Server
Installing CCS Directory Server
 
Details -
Exception occurred while registering component "%installdir%\Program files(x86)\Symantec\CCS\Reporting and Analytics\Directory Support Services\RegistrationXML\DSS.Component.Registration.xml". Error 'Exception has been thrown by the target of an invocation'.
 
 
Following Kerberos error event is logged in the System event log :-
 
The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server <name>.

Additionally the service account may become locked in AD during installation.

Cause

This issue occurs because the Kerberos authentication module generates an incorrect key for the Service account. Therefore, the service encounters authentication failure when it uses the account.

Resolution

This is a known Kerberos authentication issue and hotfix is available from Microsoft. Please follow below technote to download and apply the hotfix.
 
http://support.microsoft.com/kb/2566059
 
There is also a workaround given in the technote as below -
Delete the following registry entry on the problematic computer:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\Kerberos\Parameters\DefaultEncryptionType
 
This work around may not work always and it is recommended to download and apply the hotfix.
 

Applies To

 

CCS 11.0

Windows Server 2008 R2

Windows Server 2008 R2 SP 1

Attachments

Installation Error Screen Shot.jpg get_app