New York Security User Group

 View Only
Expand all | Collapse all

Upgrade SEE 11.1 encountered Error 25108.Cannot store Master Password to DB

Jump to Best Answer
  • 1.  Upgrade SEE 11.1 encountered Error 25108.Cannot store Master Password to DB

    Posted Dec 25, 2015 02:51 AM

    I am attempting to upgrade my SEE 11.0.1 MP1 HF1 management server to SEE 11.1 release, when the installation started for a short while, the error message popped up and installation roll back.

    SEE11.1Error4.jpg

    There is one Symantec KB talking about the similar issue  -- https://support.symantec.com/en_US/article.TECH228146.html, I tried all different options, it did not help.

    OS: 2008 R2 standard

    SQL: 2008 R2.

    I tried to launch the MSI directly and run the command line install, all failed with the same error.

    Windows install account is local admin and member of admin group, SQL install account is sa.

    Here are some errors in the MSI log:

    MSI (s) (4C:C8) [02:20:08:230]: Executing op: ActionStart(Name=GE_StorEAMasterPwdtoDB,,)
    MSI (s) (4C:C8) [02:20:08:230]: Executing op: CustomActionSchedule(Action=GE_StorEAMasterPwdtoDB,ActionType=9217,Source=BinaryData,Target=**********,CustomActionData=**********)
    MSI (s) (4C:C8) [02:20:08:230]: Creating MSIHANDLE (695) of type 790536 for thread 6088
    MSI (s) (4C:84) [02:20:08:246]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI7F3C.tmp, Entrypoint: StoreMasterPwdToDB_CA
    MSI (s) (4C!F8) [02:20:08:293]: Creating MSIHANDLE (696) of type 790531 for thread 3832
    GEDBAccess.cpp; line:263; CDynLib::Load(DBAccessIS.dll) failed. Error: 0xCB
    MSI (s) (4C!F8) [02:20:08:293]: Closing MSIHANDLE (696) of type 790531 for thread 3832
    MSI (s) (4C!F8) [02:20:11:949]: Creating MSIHANDLE (697) of type 790531 for thread 3832
    GEDBAccess.cpp; line:1298; dbAccess.StoreEAMasterPwdToDB() - failed. Unable to save Server Key Pair to Deployment : Invalid column name 'ServerPubKey'.
    Invalid column name 'ServerPrvKey_ServerKey'.. Error 0x2
    MSI (s) (4C!F8) [02:20:11:949]: Closing MSIHANDLE (697) of type 790531 for thread 3832
    MSI (s) (4C!F8) [02:20:11:949]: Creating MSIHANDLE (698) of type 790531 for thread 3832
    MSI (s) (4C!F8) [02:42:12:806]: Product: Symantec Endpoint Encryption Management Server -- Error 25108.Cannot store Master Password to DB. Unable to save Server Key Pair to Deployment : Invalid column name 'ServerPubKey'.
    Invalid column name 'ServerPrvKey_ServerKey'.. Error: Unable to save Server Key Pair to Deployment : Invalid column name 'ServerPubKey'.
    Invalid column name 'ServerPrvKey_ServerKey'..

    MSI (s) (4C!F8) [02:42:12:806]: Closing MSIHANDLE (698) of type 790531 for thread 3832
    CustomAction GE_StorEAMasterPwdtoDB returned actual error code 1603 (note this may not be 100% accurate if translation happened inside sandbox)
    MSI (s) (4C:84) [02:42:12:806]: Closing MSIHANDLE (695) of type 790536 for thread 6088

     



  • 2.  RE: Upgrade SEE 11.1 encountered Error 25108.Cannot store Master Password to DB

    Posted Dec 25, 2015 03:53 AM

    Attached the MSI log.



  • 3.  RE: Upgrade SEE 11.1 encountered Error 25108.Cannot store Master Password to DB

    Posted Dec 25, 2015 03:56 AM
      |   view attached

    re-attach the log

    Attachment(s)

    zip
    SEEMgrinst11_1_0v1.zip   210 KB 1 version


  • 4.  RE: Upgrade SEE 11.1 encountered Error 25108.Cannot store Master Password to DB
    Best Answer

    Posted Feb 18, 2016 04:37 PM

    Symantec team gave me a workaround and it fixed the error, now I am running SEE 11.1.0 GA release version. Here are the intructions I followed.

    1. Uninstall the 11.1 beta version from my SEE management servers.

    2. Run the following SQL query on my SEE 11.1.0 database (the one we participated the beta testing).

    delete from GEMSCommands where CmdCode = 7

    update GEMSDataAccess set DbVersion = ‘9.8.7’

    3. Install SEE 11.1.0 GA release version and the installation completed to the end with no error.

    However, I had to uninstall all the other components from Add/Removal programs so that I can installl SEE 11.1.0 compoments, such as, management agent, drive encryption, helpdek, etc.