Upgrading the Symantec Endpoint Protection (SEP) client causes loss of Symantec Critical System Protection (SCSP) agent communication

Article Id: 170837
Status: Published
Updated On: 23-01-2018 02:37
Legacy Id: TECH248781
Products:
Embedded Security Critical System Protection
Issue/Introduction:

On a system where you have installed the SEP client and the SCSP agent, if you upgrade the SEP client to version 14RU1, it breaks the functionality of the SCSP agent.

Agent drivers are not loaded and IPS feature is not working:
C:\Users\Administrator>sc query sisipsdriver
[SC] EnumQueryServicesStatus:OpenService FAILED 1068: The specified service does not exist as an installed service.

Cause:

During the SEP upgrade to version 14RU1, some registry entries belonging to SCSP are removed.

Resolution:

Before upgrading the SEP client to version 14RU1, edit the package to remove a feature set. 
  1. In the SEPM Console, go to Admin > Client Install Feature Set.
  2. Either create a new feature set, or edit a custom feature set.
  3. On the feature set, clear Application Hardening.
  4. Save the feature set and use it in creating or exporting the packages.