Article Number
000036751
Applies To
RSA Product Set: NetWitness Endpoint
RSA Product/Service Type: NetWitness Endpoint
RSA Version/Condition: 4.4.x, 4.3.x
Platform: Windows
Issue
NetWitness Endpoint agent will fail to upgrade as seen in log files such as the NWE install log, and the version reported in the UI.
- A successful install log output:
- Doing action: OnSuccessExitAction
- A failing install log output:
- Failed to grab execution mutex. System error 258.
Cause
This is normally caused by either:
- A running instance of the msi installer that is currently executing already. This will prevent further installs until the first is complete when running an msi installer.
- PendingFileRenameOperations registry key is present. This regkey is meant to prevent msi installs until the system has been rebooted, so pending changes to the system can be performed before updating additional files.
See the link
here for more details on the regkey mentioned above
Resolution
To determine if there are any pending files awaiting reboot, run regedit and check the following regkey:
- HKLM\SYSTEM\CurrentControlSet\Control\Session Manager "PendingFileRenameOperations"
If the key is populated and shows entries, the next step would be to reboot the system to apply pending file rename changes. If it still shows this key populated after reboot, it may be necessary to delete the key instead but caution should be taken in deleting this key to avoid stability issues.
If the issue is related to the msi install awaiting completion of another install, verify the pending process completes before attempting to upgrade the agent again. This can be done with Task Manager to check for running msi installers in the background.
