EMC CAVA 64-bit Event Enabler fails to load with Event ID: 145 - The EMC CAVA service cannot work with Symantec SAVSE as configured.

book

Article ID: 161503

calendar_today

Updated On:

Products

Protection Engine for Cloud Services Protection Engine for NAS

Issue/Introduction

The EMC CAVA 64-bit Event Enabler is unable to locate the Symantec Protection Engine product and fails to load.

Log Name: Application
Source: EMC CEE
Date: 12/2/2014 5:13:10 PM
Event ID: 145
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: hostname
Description:
The service encountered an error during initialization. Cannot initialize Symantec SAV SE DLL, error return = ffffffff(hex) . The EMC CAVA service cannot work with Symantec SAVSE as configured.

Possible Cause: The registry entries for locating Symantec SAVSE configuration files not found.

Solution: Reinstall and restart Symantec SAVSE service.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="EMC CEE" />
<EventID Qualifiers="0">145</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2014-12-02T23:13:10.000000000Z" />
<EventRecordID>83785</EventRecordID>
<Channel>Application</Channel>
<Computer>hostname</Computer>
<Security />
</System>
<EventData>
<Data>EMC CAVA</Data>
<Data>Symantec SAV SE DLL</Data>
<Data>ffffffff(hex) </Data>
</EventData>
</Event>

Cause

When Symantec Endpoint Protection 64-bit Client or any other 64-bit Symantec application is installed on a Windows Server, it creates the Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\InstalledApps. After that Registry key is created, the EMC CAVA 64-bit Event Enabler no longer attempts to read the HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Symantec\InstalledApps where the 32-bit / Symantec Protection Engine product is registered. The EMC CAVA 64-bit Event Enabler then fails to locate the Symantec Protection Engine product.

Resolution

To resolve this issue please create the following registry key and string value:

HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\InstalledApps\
Key = "Symantec Scan Engine"
Value = "C:\Program Files (x86)\Symantec\Scan Engine\" (path to installed product on Windows Server)


Applies To

Windows 64 bit Servers

EMC CAVA 64-bit Event Enabler