Enhanced Auditing installation fails with error code 1603

book

Article ID: 100062225

calendar_today

Updated On:

Description

Error Message

Application Event Logs:

Log Name:      Application
Source:        MsiInstaller
Event ID:      11708
Task Category: None
Level:         Information
Keywords:      Classic
Description:
Product: Veritas Enhanced Auditing -- Installation failed.

Log Name:      Application
Source:        MsiInstaller
Event ID:      1033
Task Category: None
Level:         Information
Keywords:      Classic
Description:
Windows Installer installed the product. Product Name: Veritas Enhanced Auditing. Product Version: .... Product Language: 1033. Manufacturer: Veritas Technologies LLC. Installation success or error status: 1603.


System Event Logs:

Log Name:      System
Source:        Service Control Manager
Event ID:      7024
Task Category: None
Level:         Error
Keywords:      Classic
Description:
The Elasticsearch ... (elasticsearch-service-x64) service terminated with the following service-specific error: 
Incorrect function.


Verbose logging errors:

CAQuietExec64:  Error 0x80070001: Command line returned an error.
CAQuietExec64:  Error 0x80070001: QuietExec64 Failed
CAQuietExec64:  Error 0x80070001: Failed in ExecCommon64 method
CustomAction FreshElasticInstallation returned actual error code 1603 (note this may not be 100% accurate if translation happened inside sandbox)
Action ended 15:09:26: InstallFinalize. Return value 3.

MSI (c) (FC:00) [...]: Product: Veritas Enhanced Auditing -- Installation failed.

MSI (c) (FC:00) [...]: Windows Installer installed the product. Product Name: Veritas Enhanced Auditing. Product Version: .... Product Language: 1033. Manufacturer: Veritas Technologies LLC. Installation success or error status: 1603.

MSI (c) (FC:00) [...]: Grabbed execution mutex.
MSI (c) (FC:00) [...]: Cleaning up uninstalled install packages, if any exist
MSI (c) (FC:00) [...]: MainEngineThread is returning 1603

 

Workaround

  1. Clean the existing ElasticSearch installation attempt:
    1. Open an administrative command prompt.
    2. Go to the Elastic directory bin folder.   For example, execute the command cd C:\Program Files\Elastic\elasticsearch-7.17.4-windows-x86_64\elasticsearch-7.17.4\bin
    3. Run the following command  to stop the service: elasticsearch-service.bat stop
    4. Run the following command to remove the service: elasticsearch-service.bat remove
    5. After successfully removing the ElasticSearch installation, delete the Elastic folder.  For example, launch File Explorer, navigate to the C:\Program Files folder to delete the Elastic folder.
  2. Change the language of the OS (refer the screenshot below) before restarting the machine.
    1. Go to the Language settings page.
    2. Make English (United States) the default app language by shifting the English (United States) language to the top of the list.
    3. Click the Administrative language setting link on the page. (Screenshot point 1.)
    4. Select the Administrative tab. (Screenshot point 2.)
    5. Click the Change system locale... button. (Screenshot point 3.)
    6. From Current system locale: drop down menu, select English (United States). (Screenshot point 4.)
    7. Click the OK button to save the changes. (Screenshot point 5.)
    8. Restart the server. (Screenshot point 6.)

    

      3.  After the machine has restarted, re-run the Enhanced Auditing installer. This can be done by double-clicking the installer from a local drive on the server or by running the verbose logging msiexec command to generate new installation logs.

  

Cause

The Java Virtual Machine (JVM) used by Enhanced Auditing is not able to decode the elasticsearch.yml configuration file when the server locale is not set to English - United States (1033). With this mismatch of locale settings between the installer and the Windows OS not set to English - United States, the installation will fail.

 

Issue/Introduction

Enterprise Vault (EV) Compliance Accelerator (CA)/Veritas Advanced Supervision (VAS) or Discovery Accelerator (DA) Enhanced Auditing installation fails with error code 1603. This error code indicates there may be a server OS locale/language mismatch with the installer. To obtain more information on the error, Enhanced Auditing installation verbose logging can be generated via the msiexec command run in an administrative command prompt. For example, to log the Enhanced Auditing installation, edit the paths as indicated and execute the command to start the installation with verbose logging: msiexec /i "<local drive path to installer>\Veritas Enhanced Auditing\Veritas Enhanced Auditing.msi" /L*V <path to log>\EnhancedAuditingInstallLog.log Once the installation has been completed in the failed state, a review of the log should list the errors as below.
Powered by Wolken Software