Symantec Cafagent Fails to Start on SLES 15 SP4
Article ID: 426231
Updated On:
Products
Issue/Introduction
Administrators encounter an issue where the Symantec Agent for Linux fails to start on SUSE Linux Enterprise Server (SLES) 15 SP4. Specifically, the cafagent service enters a stopped state and refuses to turn on, even after a full uninstallation and reinstallation of the agent. This results in the "CAF and/or AMD daemon did not start successfully" error, causing the endpoint to stop reporting to the Symantec management console.
Environment
Linux Distribution: SLES 15 P4
SEP Version: 14.3 RU9
Cause
The root cause of this failure is a compatibility conflict between the Common Agent Framework (CAF) component and the updated system libraries or kernel headers introduced in recent SLES 15 SP4 patches.
While core modules like sisamdagent and sisipsagent may show as "running," the cafagent (which handles communication with the cloud console) fails to initialize because version 2.0.9-246 contains a known bug that prevents the daemon from binding correctly on updated SLES environments. Standard reinstallations often fail because the local repository or installer cache continues to pull the older, incompatible 2.0.9-246 package.
Resolution
To resolve this issue and restore communication to the console, you must manually upgrade the CAF component to version 2.0.9-247 or higher. This version contains the specific fixes required for SLES 15 SP4 stability.
You can use the following command:
rpm -Uvh sdcss-caf-2.0.9.247.suse15.x86_64.rpm
Feedback
