How to verify Host Integrity status via the registry

Products

• Endpoint Protection

Issue/Introduction

There needs to be a way to verify the status of Host Integrity via the registry.

Resolution

For SEP clients older than 14.3 RU5 the registry value: "HIEngineResult" can be used to determine the current status of Host Integrity.

32-bit: [HKEY_LOCAL_MACHINE\Software\Symantec\Symantec Endpoint Protection\SMC]

64-bit: [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Symantec\Symantec Endpoint Protection\SMC]

 

HIEngineResult = 0 (No HI policy assigned)

HIEngineResult = 1 (HI Check Pending)

HIEngineResult = 2 (HI Check Passed)

HIEngineResult = 3 (HI Check Failed)

 

Starting from SEP version 14.3 RU5 the same registry value can be checked in HKEY_LOCAL_MACHINE\Software\Symantec\Symantec Endpoint Protection\SMC, even though the system is 64 bit.