Errors when applying SCU 2022-3 to a remote 12.6.1 CCS Manager

Products

• Control Compliance Suite Standards Server
• Control Compliance Suite

Issue/Introduction

When trying to apply SCU (Security Content Update) 2022-3 to a fresh CCS 12.6.1 Remote manager in any way, i.e. LiveUpdate or manually installing the SCU 2022-3 media or via Ansible scripts, the install fails with various errors, and the SCU 2022-3 version is 12.60.10300.1000.

Error when applying via LiveUpdate:
Successfully triggered Security Content Update on CCS Manager Service (host = <manager_name>).Package install failed for an Security Content Update on CCS Manager Service (host = <manager_name>).
Error Message: Block installation if all MSIs are disabled: The installation activity Block installation if all MSIs are disabled failed to execute.Log folder path: C:\ProgramData\Symantec.CSM\Logs\Installs\CSI.20230111192802Refreshing Health and Status details. Health and Status job execution succeeded. Navigate to Manage > Live Update view of CCS Console for update(s) deployment status.

 

Error when applying manually on the remote manager server: (install button is greyed out)

 

Error when applying via Ansible:
You won't get any errors when installing it via Ansible, but the version of the manager will show as 12.60.10300.1000 and it shows the following errors in the remote manager logs:
2023-01-10 15:12:33.123,2023-01-10 15:12:33.123,<manager_name>,Verbose,,CSIExec,10816,Main Application Thread,1,Run,,0,3,Feature: CSM.SMContent.CCSManager Enabled: False
2023-01-10 15:12:33.123,2023-01-10 15:12:33.123,<manager_name>,Verbose,,CSIExec,10816,Main Application Thread,1,Run,,0,3,Setup cannot continue. All MSIActivities are disabled (UpToDate)
2023-01-10 15:12:33.123,2023-01-10 15:12:33.123,<manager_name>,Verbose,,CSIExec,10816,Main Application Thread,1,Run,,0,2,Leaving BlockIfMSIsDisabled.Run
2023-01-10 15:12:33.123,2023-01-10 15:12:33.123,<manager_name>,Verbose,,CSIExec,10816,Main Application Thread,1,Run,,0,2,Adding Failures to failure registryCSI.BlockIfMSIsDisabled

 

Environment

Release : CCS 12.6.1 remote CCS manager

Resolution

By default, a fresh install of the remote 12.6.1 CCS Manager has 2022-3 installed by default, so there is no need to reapply it.  The versions for SCU 2022-3 can be either 12.60.10300.1000 or 12.60.10300.1110, and both are correct as either one indicates that SCU 2022-3 is installed on the manager.