You attempt to install Symantec Endpoint Protection (SEP) 14 but the installation fails and rolls back.
Examples you may see in SIS_INST.log:
ERROR I SIS File C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\14.0.3897.1101.105\SAEP\IDS\bin\IDSLWInit.exe is not trusted. Verification result: 20
ERROR I SIS File C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\14.0.3897.1101.105\SAEP\Setup\NetInstaller.exe is not trusted. Verification result: 20
Root Certificates needed by SEP Hardening installer are missing from the system.
Update root certificates on the system. To identify which certificates are missing you can enable CAPI2 logging and reproduce the installation failure.
To enable CAPI2 logging: