ATP LogCollector installation get failed while configuring services.

Products

• Symantec Products

Issue/Introduction

While installing Logcollector utility it get stucked while configuring the services

WARN	2016-09-13 12:09:35,282
com.symantec.atp.logcolconfig.LogColConfigUtilities	main	Exception in
retrieveIPFromCertStore: C:\Program Files (x86)\Symantec\Log
Collector\WEB-INF\classes\mssdbconnector.p12 (The system cannot find the file
specified)

INFO	2016-09-13 12:29:11,322
com.symantec.atp.logcolconfig.LogColConfigUtilities	AWT-EventQueue-0	
All input
fields have been verified, now performing clean up
INFO	2016-09-13 12:29:11,322
com.symantec.atp.logcolconfig.LogColConfigUtilities	SwingWorker-pool-2-
thread-1
Try to stop log collector service and uninstall it just in case it exists and
running.
INFO	2016-09-13 12:29:11,322
com.symantec.atp.logcolconfig.LogColConfigUtilities	SwingWorker-pool-2-
thread-1
Ignore the not found warnings for fresh installation below:
INFO	2016-09-13 12:29:11,322
com.symantec.atp.logcolconfig.LogColConfigUtilities	SwingWorker-pool-2-
thread-1
function ExecuteCmd
WARN	2016-09-13 12:29:11,384
com.symantec.atp.logcolconfig.LogColConfigUtilities	SwingWorker-pool-2-
thread-1
executed C:\Program Files (x86)\Symantec\Log
Collector\commons-daemon\prunsrv.exe //SS/mssdbconnector
WARN	2016-09-13 12:29:11,384
com.symantec.atp.logcolconfig.LogColConfigUtilities	SwingWorker-pool-2-
thread-1
returned error: 
[2016-09-13 12:29:11] [error] [ 4256] Load configuration failed
[2016-09-13 12:29:11] [error] [ 4256] The system cannot find the file 
specified.

Environment

- ATP version : 2.2 (Latest)
- SEPM version : 12.1.6867.6400 
- SEPM OS : Windows 2008 R2 Server Standard Full_Installation_LT Service Pack 164-bit
- SEPM DB : Embedded DB

Cause

If we ran ipconfig /all found that wrong DNS entry e.g:  DNS Servers . . . . . . . . . . . : 127.0.0.1

 

Resolution

Changed the incorrrect entry from HOST file (C:\Windows\System32\drivers\etc\hosts) and put entry as hostname <-> ip

However, DNS resolution should work correctly on the SEPM machine. The Hostname of the SEPM machine should be correctly resolve to its IP address.