Cannot create the Symantec Endpoint Encryption client installers from Symantec Endpoint Encryption Manager
search cancel

Cannot create the Symantec Endpoint Encryption client installers from Symantec Endpoint Encryption Manager

book

Article ID: 225017

calendar_today

Updated On:

Products

Endpoint Encryption Desktop Email Encryption Drive Encryption Encryption Management Server File Share Encryption Gateway Email Encryption PGP Command Line PGP Key Management Server PGP Key Mgmt Client Access and CLI API PGP SDK

Issue/Introduction

When building the "SEE Client.msi" and "SEE Client_x64.msi" files from Symantec Endpoint Encryption Software Setup in Symantec Endpoint Encryption Manager, you may see an error that refers to The request failed with HTTP status 401: Unauthorized after you click on the Next button on the Management Agent Installation Settings - Communication page. All the fields on this page are pre-populated except for the Password and you see this error even though you enter the correct password:

Environment

Symantec Endpoint Encryption 11.3 and above.

Cause

Windows loopback detection has been triggered. Windows loopback detection is enabled by default in Windows.

Resolution

To disable loopback detection, please do the following.

First, check that loopback detection is enabled. Open a command prompt with local administrator rights and run this command. By default, the registry key should not be found:

C:\>reg query HKLM\SYSTEM\CurrentControlSet\Control\Lsa /v DisableLoopbackCheck

ERROR: The system was unable to find the specified registry key or value.

To disable loopback detection, run this command to add the DisableLoopbackCheck key with a value of 1:

C:\>reg add HKLM\SYSTEM\CurrentControlSet\Control\Lsa /v DisableLoopbackCheck /t REG_DWORD /d 1
The operation completed successfully.

To check the key has been added, run the reg query command again:

C:\>reg query HKLM\SYSTEM\CurrentControlSet\Control\Lsa /v DisableLoopbackCheck

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa
  DisableLoopbackCheck    REG_DWORD    0x1

After creating the "SEE Client.msi" and "SEE Client_x64.msi" files, you can delete the DisableLoopbackCheck key:

C:\>reg delete HKLM\SYSTEM\CurrentControlSet\Control\Lsa /v DisableLoopbackCheck /f
The operation completed successfully.