Chicago Security User Group

 View Only
  • 1.  Remote repair of the SEP 12.1.2 client

    Posted Apr 04, 2013 11:57 AM

    SEP admins,

    I am having the engineering team build me a task in altiris that would initiate the silent repair process for the SEP client. The engineering team came back and said the repair process fails do to iron.db beeing locked. Can someone explain what is the iron.db and how to unlock if that is secure or not.



  • 2.  RE: Remote repair of the SEP 12.1.2 client

    Posted Apr 04, 2013 12:08 PM

    I believe it has to do with reputation/whitelist definitions

    When running the repair, the SEP installer should stop the necessary services. What happens if you run the repair locally?



  • 3.  RE: Remote repair of the SEP 12.1.2 client

    Posted Apr 04, 2013 12:38 PM

    Any events in the event viewer? If symantec process is holding and we try to terminate it will be logged under tamper protection..Check if you find any



  • 4.  RE: Remote repair of the SEP 12.1.2 client

    Trusted Advisor
    Posted Apr 04, 2013 01:35 PM
      |   view attached

    Hello,

    Iron.db refers to the IRON database and is protected by Symprotect.

    Secondly, In reference to the Repairing Symantec Endpoint Protection clients, I would suggest you to check the Page 33 of Altiris Symantec™ Endpoint Protection Integration Component 7.1 SP2 User Guide. (attached)

    Hope that helps!!



  • 5.  RE: Remote repair of the SEP 12.1.2 client

    Posted Apr 05, 2013 04:52 AM

    Thumbs ups for above Mithun !!!



  • 6.  RE: Remote repair of the SEP 12.1.2 client

    Broadcom Employee
    Posted Apr 05, 2013 06:33 AM

    Hi,

    I would suggest to log a case with Altiris support.

    How to create a new case in MySupport

    http://www.symantec.com/docs/TECH58873

    How to Create and Validate a SymAccount for using Symantec's MySupport

    http://www.symantec.com/docs/HOWTO31127

    How to update a support case and upload diagnostic files with MySupport

    http://www.symantec.com/docs/TECH71023