Upgrading the Symantec Endpoint Protection (SEP) client causes loss of Symantec Critical System Protection (SCSP) agent communication

Products

• Embedded Security Critical System Protection

Issue/Introduction

On a system where you have installed the SEP client and the SCSP agent, if you upgrade the SEP client to version 14RU1, it breaks the functionality of the SCSP agent.

Agent drivers are not loaded and IPS feature is not working:
C:\Users\Administrator>sc query sisipsdriver
[SC] EnumQueryServicesStatus:OpenService FAILED 1068: The specified service does not exist as an installed service.

Cause

During the SEP upgrade to version 14RU1, some registry entries belonging to SCSP are removed.

Environment

Systems on which you have installed the SEP client and the SCSP agent.

Resolution

Before upgrading the SEP client to version 14RU1, edit the package to remove a feature set. 

1. In the SEPM Console, go to Admin > Client Install Feature Set.
2. Either create a new feature set, or edit a custom feature set.
3. On the feature set, clear Application Hardening.
4. Save the feature set and use it in creating or exporting the packages.