Endpoint Protection

Endpoint Protection 12.1.4104.4130

Enterprise licensing

>>>>>>>>>

I'm keep getting the following error every time I try to install the appliance...

Unable to install SVA: com.symantec.vsep.VSEPException: bad certificate, fingerprint: 99:eb:e7:73:e1:63:54:2c:94:81:7a:aa:c3:b9:3a:67:04:73:2e:ee

I'm trying to install the Symantec Virtual Appliance on to my ESXi hosts to take advantage of the Shared Insignt Cache functionality of the product. I've followed all Symantec instructions.  I'm pretty sure I'm doing this right; why am I getting this error?  I've only found one other person on the internet with the same issue, and the error he gets is exactly the same as mine, even the fingerprint.

Instructions provided by Symantec:

http://www.symantec.com/docs/HOWTO81083

http://www.symantec.com/docs/HOWTO81082

A fantastic blog post, way better than Symantec instructions:

https://www.interworks.com/blogs/ijahanshahi/2014/08/11/deploying-symantec-security-virtual-appliance-vshield

Any insight would be helpful since I cannot proceed any further at this stage, and as I far as I understand Symantec support are clueless at this stage.

Here are the SVA_Installation.logs

01 Oct 2014 16:58:31 [Installer] INFO - ---------------------
01 Oct 2014 16:58:31 [Installer] INFO - Symantec Endpoint Protection SVA Installer, Copyright (C) 2012 Symantec Corporation.  All rights reserved.
01 Oct 2014 16:58:31 [Installer] DEBUG - Connecting to vCenter...
01 Oct 2014 16:58:31 [PasswordField] INFO - Enter the vCenter password for [administrator]: 
01 Oct 2014 16:58:37 [Installer] DEBUG - Connected.  Searching for host 10.40.4.14...
01 Oct 2014 16:58:37 [Installer] DEBUG - Found host 10.40.4.14
01 Oct 2014 16:58:38 [Installer] DEBUG - Installing SVA...
01 Oct 2014 16:58:38 [Installer] DEBUG - Initializing with vShield Manager...
01 Oct 2014 16:58:41 [VersionNumber] DEBUG - Version number is small: 5.0.0
01 Oct 2014 16:58:41 [PasswordField] INFO - Set the admin user password for the SVA: 
01 Oct 2014 16:58:46 [PasswordField] INFO - Re-enter the admin user password: 
01 Oct 2014 16:58:49 [Installer] DEBUG - Installing...
01 Oct 2014 16:58:49 [Installer] INFO - 1 - vmfs1: 480551MB free
01 Oct 2014 16:58:49 [Installer] INFO - 2 - vSwap: 727756MB free
01 Oct 2014 16:58:49 [Installer] INFO - 3 - vmfs2: 430177MB free
01 Oct 2014 16:58:49 [Installer] INFO - 4 - vmfs3: 279286MB free
01 Oct 2014 16:58:49 [Installer] INFO - 5 - vmfs4: 517274MB free
01 Oct 2014 16:58:49 [Installer] INFO - 6 - vmfs6: 566659MB free
01 Oct 2014 16:58:49 [Installer] INFO - 7 - vmfs5: 536508MB free
01 Oct 2014 16:58:49 [Installer] INFO - 8 - esxi4-sas-das: 112131MB free
01 Oct 2014 16:58:49 [Installer] INFO - 9 - vmfs7: 514768MB free
01 Oct 2014 16:58:49 [Installer] INFO - 10 - vmfs8: 422368MB free
01 Oct 2014 16:58:49 [Installer] INFO - 11 - vmfs9: 279334MB free
01 Oct 2014 16:58:49 [Installer] INFO - 12 - vmfs10: 452658MB free
01 Oct 2014 16:58:49 [Installer] INFO - On host esxi4.domain.com, which datastore would you like to install the SVA: 
01 Oct 2014 16:58:52 [Installer] DEBUG - You chose: 8
01 Oct 2014 16:58:52 [Installer] DEBUG - You chose datastore: esxi4-sas-das
01 Oct 2014 16:58:52 [VMWareHost] DEBUG - Network: DMZ
01 Oct 2014 16:58:52 [VMWareHost] DEBUG - Skipping network
01 Oct 2014 16:58:52 [VMWareHost] DEBUG - Network: Edmonton Client Network
01 Oct 2014 16:58:52 [VMWareHost] DEBUG - Skipping network
01 Oct 2014 16:58:52 [VMWareHost] DEBUG - Network: Swift
01 Oct 2014 16:58:52 [VMWareHost] DEBUG - Skipping network
01 Oct 2014 16:58:52 [VMWareHost] DEBUG - Network: Test Network
01 Oct 2014 16:58:52 [VMWareHost] DEBUG - Skipping network
01 Oct 2014 16:58:52 [VMWareHost] DEBUG - Network: VM Network
01 Oct 2014 16:58:52 [VMWareHost] DEBUG - Skipping network
01 Oct 2014 16:58:52 [VMWareHost] DEBUG - Network: vmservice-vshield-pg
01 Oct 2014 16:58:52 [Installer] INFO - 1 - DMZ
01 Oct 2014 16:58:52 [Installer] INFO - 2 - Edmonton Client Network
01 Oct 2014 16:58:52 [Installer] INFO - 3 - Swift
01 Oct 2014 16:58:53 [Installer] INFO - 4 - Test Network
01 Oct 2014 16:58:53 [Installer] INFO - 5 - VM Network
01 Oct 2014 16:58:53 [Installer] INFO - On host esxi4.domain.com, which network would you like to install the SVA: 
01 Oct 2014 16:58:54 [Installer] DEBUG - You chose: 5
01 Oct 2014 16:58:54 [Installer] DEBUG - Uploading...
01 Oct 2014 16:58:55 [Installer] ERROR - ---------------------
01 Oct 2014 16:58:55 [Installer] ERROR - Unable to install SVA: com.symantec.vsep.VSEPException: bad certificate, fingerprint: 99:eb:e7:73:e1:63:54:2c:94:81:7a:aa:c3:b9:3a:67:04:73:2e:ee
01 Oct 2014 16:58:55 [Installer] ERROR - settings file: C:\Symantec\Installation-Files\esxi4.xml
01 Oct 2014 16:58:55 [Installer] ERROR - vcenter_ip_address=10.40.1.200
01 Oct 2014 16:58:55 [Installer] ERROR - sva_ip_address=null
01 Oct 2014 16:58:55 [Installer] ERROR - sva_gateway=null
01 Oct 2014 16:58:55 [Installer] ERROR - sva_subnet=null
01 Oct 2014 16:58:55 [Installer] ERROR - sva_dns=null
01 Oct 2014 16:58:55 [Installer] ERROR - sva_hostname=sva-04
01 Oct 2014 16:58:55 [Installer] ERROR - esx_ip_address=10.40.4.14
01 Oct 2014 16:58:55 [Installer] ERROR - vshield_ip_address=10.40.1.191
01 Oct 2014 16:58:55 [Installer] ERROR - location_of_package=C:\Symantec\Installation-Files\Symantec_Endpoint_Protection_12.1.2_Security_Virtual_Appliance_ML.ova
01 Oct 2014 16:58:55 [Installer] ERROR - datastore_prompt=1
01 Oct 2014 16:58:55 [Installer] ERROR - sylink_xml=C:\Symantec\Installation-Files\sylink.xml
01 Oct 2014 16:58:55 [Installer] ERROR - com.symantec.vsep.VSEPException: com.symantec.vsep.VSEPException: bad certificate, fingerprint: 99:eb:e7:73:e1:63:54:2c:94:81:7a:aa:c3:b9:3a:67:04:73:2e:ee
01 Oct 2014 16:58:55 [Installer] ERROR - Stack trace:
01 Oct 2014 16:58:55 [Installer] ERROR - com.symantec.vsep.vmware.VMWareHost.installSVA(VMWareHost.java:344)
01 Oct 2014 16:58:55 [Installer] ERROR - com.symantec.vsep.vmware.VMWareHost.installSecurityVirtualAppliance(VMWareHost.java:579)
01 Oct 2014 16:58:55 [Installer] ERROR - com.symantec.vsep.installer.Installer.main(Installer.java:827)
01 Oct 2014 16:58:55 [Installer] ERROR - ---------------------

Just figured out - the fingerprint mentioned in the error message belongs to the SVA OVF Template file certificate... when you try to deploy the OVF through vSphere client, VMware warns you about the certificate but lets you deploy the OVA file anyways... for some reason through the CMD prompt using the JAR file, it fails.  No soultion from Symantec yet.  Not sure why the certificate on the OVF is not valid... 

Many SEP components are signed by the CA described in the below article, can you check if you have it installed and trusted?

http://www.symantec.com/docs/TECH217284

• VeriSign Class 3 Public Primary Certification Authority - G5 certificate.
• VeriSign Class 3 Code Signing 2010 CA certificate.

Will this certificate need to go on the vCenter server or the client I#m running the installation from?

Please check the attachment... I've opened the OVF certificate through vSphere... not sure if the root certificate is what I'm missing.  

That screenie seems to suggest you have no problem with the CA's certs, but with the cert in the ova itself.

I've just downloaded it myself, and confirmed that the cert itself expired on 24/11/2013.  This means either Symantec need to create a new ova with an updated cert, or you need to get your VMWare environment to allow expired certs.

I'm afraid I'm not aware of how to accomplish this in VMWare, but ont he Symantec side, I'd highly recommend loggin a support case to prompt them to update the media.

Well I have a case open anyways... the tech is testing this theory in the lab.  Hopefully they will be able to release a new OVA file soon.  

Thaks for your help.  

I am having the same issue with SEPM 12.1.4104.4130, deploying a newly downloaded SVA 12.1.2 to a vCenter 5.5 server / ESXi 5.5 host.   It gets all the way through the configuration questions, then spits out the bad certificate error in the title.    Please let us know what they come up with.

Thanks!!

So Symantec support have returned to me with a new OVA file, I've just downloaded and deployed it via CMD.  Deployed just fine, no certificate error.  The problem is the OVA file on fileconnect... the certificate on it is experied.  I've asked them if the file will be updated, and they said it will be, though not sure when.  If you anyone requires this file I can send it via wetransfer or a similar platform.

Hi Cengizu

I need that Ova, i opened the same case to Symantec, but still waiting, could you upload it somewhere?

I can send it via we transfer but I need your email address for that...

Thanks!

i´m downloading it now

Hi Cengizu; Hi Falvarez,

I'm experiencing the same issue.

Is it possible to send me the download link? Would be very much appreciated!

thx

Roel
 

i need the link to the download as well... thanks and help me...!

I've created a dropbox public link for anyone who wants to download.

[REMOVED]

thank you!!!

Greetings,

Symantec is aware of the issue and is currently investigating a permanent solution. In the mean time, please reach out to Symantec Technical Support for assistance with acquiring the latest version of the SVA.

Thanks!

Looks like Symantec have removed my dropbox link... I'm assuming they want everyone to go thorugh the offical support channels... Anyone who is still waiting for the OVA file, send me a private message...

I have the same issue would appreciate if you could share the link 

Hi David,

I have a support case open for this issue.

I would like to acquire the latest version via case 07440474.

Please help.

Thanks!

Roel

Hi All,

Symantec is aware of the issue and working on to fix it.

Please create a case with Symantec Technical Support Team. Check this Article below:

How to create a new case in MySupport

http://www.symantec.com/docs/TECH58873

Phone numbers to contact Symantec Technical Support:-

Regional Support Telephone Numbers:

• United States: https://support.broadcom.com (407-357-7600 from outside the United States)
• Australia: 1300 365510 (+61 2 8220 7111 from outside Australia)
• United Kingdom: +44 (0) 870 606 6000

Additional contact numbers: http://www.symantec.com/business/support/contact_techsupp_static.jsp

Hope that helps!!

Thanks and Regards,

Arpit Badwaik

Sr. Technical Support Engineer | Endpoint Security - Advance Team

Symantec Corporation

Hi all,

http://www.symantec.com/business/support/index?page=content&id=TECH225415

Good job 

Thanks 

Greetings,

The Symantec_Endpoint_Protection_12.1.5_Security_Virtual_Appliance_ML.ova file is now available for download on FileConnect. Sorry for the delay!

Thanks!

@David , 

Perfect !

I guess its time to mark this as fixed. :-p