MBAM Installation Failing with MSI error code 1603

MBAM Installation Failing with MSI error code 1603

I am trying to install the MBAM Administration and Monitoring Server on Windows Server 2008R2.  I have passed all the pre-requisite checks and have the database installed with reports successfully running on a separate SQL server instance.  I am not encrypting communications between the servers at this point as we just want to evaluate MBAM functionality.

I have a local admin account I'm using to install the server components which has CRUD access on the SQL database instance.  There is a different service account running the SQL instance.  The local admin account I'm using was used to set all the prerequisites, but is not the System account.

The wizard runs for a period of time before failing.  The error code appears to point to the need to run the setspn command.  However, it is not clear in the documentation what objects and services need to have the SPN set in order to make this installation succeed.  

Any help is appreciated.

In searching the MSI log, I see this with a Return Value of 3 (Excerpt from log):

1: Publishing product information 
Action ended 15:44:50: PublishProduct. Return value 1.
MSI (s) (C8:D8) [15:44:50:142]: Doing action: InstallExecuteAgain
Action 15:44:50: InstallExecuteAgain. 
Action start 15:44:50: InstallExecuteAgain.
MSI (s) (C8:D8) [15:44:50:158]: Running Script: C:\Windows\Installer\MSI33DF.tmp
MSI (s) (C8:D8) [15:44:50:158]: User policy value 'DisableRollback' is 0
MSI (s) (C8:D8) [15:44:50:158]: Machine policy value 'DisableRollback' is 0
MSI (s) (C8:D8) [15:44:50:158]: Executing op: Header(Signature=1397708873,Version=500,Timestamp=1064402329,LangId=1033,Platform=589824,ScriptType=1,ScriptMajorVersion=21,ScriptMinorVersion=4,ScriptAttributes=1)
MSI (s) (C8:D8) [15:44:50:158]: Executing op: ProductInfo(ProductKey={9161999C-E0D9-4418-8CFB-19D938A7F7F2},ProductName=Microsoft BitLocker Administration and Monitoring,PackageName=MBAE17D.MSI,Language=1033,Version=16778453,Assignment=1,ObsoleteArg=0,,,PackageCode={F6E01656-337A-4930-9BD0-EEACF4B5EB07},,,InstanceType=0,LUASetting=0,RemoteURTInstalls=0,ProductDeploymentFlags=3)
MSI (s) (C8:D8) [15:44:50:158]: Executing op: DialogInfo(Type=0,Argument=1033)
MSI (s) (C8:D8) [15:44:50:158]: Executing op: DialogInfo(Type=1,Argument=Microsoft BitLocker Administration and Monitoring)
MSI (s) (C8:D8) [15:44:50:174]: Executing op: RollbackInfo(,RollbackAction=Rollback,RollbackDescription=Rolling back action:,RollbackTemplate=[1],CleanupAction=RollbackCleanup,CleanupDescription=Removing backup files,CleanupTemplate=File: [1])
MSI (s) (C8:D8) [15:44:50:174]: Executing op: SetBaseline(Baseline=0,)
MSI (s) (C8:D8) [15:44:50:174]: Executing op: SetBaseline(Baseline=1,)
MSI (s) (C8:D8) [15:44:50:174]: Executing op: ActionStart(Name=RegisterSPNRollback,,)
Action 15:44:50: RegisterSPNRollback. 
MSI (s) (C8:D8) [15:44:50:174]: Executing op: CustomActionSchedule(Action=RegisterSPNRollback,ActionType=3329,Source=BinaryData,Target=RegisterSPNDeferred,CustomActionData=Remove=True)
MSI (s) (C8:D8) [15:44:50:189]: Executing op: ActionStart(Name=RegisterSPNDeferred,,)
Action 15:44:50: RegisterSPNDeferred. 
MSI (s) (C8:D8) [15:44:50:189]: Executing op: CustomActionSchedule(Action=RegisterSPNDeferred,ActionType=3073,Source=BinaryData,Target=RegisterSPNDeferred,CustomActionData=Remove=False)
MSI (s) (C8:08) [15:44:50:377]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI3569.tmp, Entrypoint: RegisterSPNDeferred
SFXCA: Extracting custom action to temporary directory: C:\Windows\Installer\MSI3569.tmp-\
SFXCA: Binding to CLR version v2.0.50727
Calling custom action MBAMServerCAs!Microsoft.Windows.Mdop.BitlockerManagement.SetupCAs.SPNRegistrar.RegisterSPNDeferred
CustomAction RegisterSPNDeferred returned actual error code 1603 (note this may not be 100% accurate if translation happened inside sandbox)
Action ended 15:44:52: InstallExecuteAgain. Return value 3.
Sort by: Published Date | Most Recent | Most Useful
Comments
  • Hi BoiseBear,

    Please be aware that Wiki is more for sharing information (e.g. an existing solution for a problem like yours). Unfortunately, Wiki does not suite well for asking and seeking for help. (And, in fact, it was never even designed for that). It is unlikely that someone starts troubleshooting your problem right here.

    I highly suggest that you use Forums for questions (e.g. social.technet.microsoft.com/.../threads). Forums are the right place for peer-to-peer help and support where one can ask questions and receive promptly responses.

    Anyway, when you discover a solution, you are very welcomed back on the Wiki to share you findings. You could do it by editing your original article (above).

    Hope this helps.

  • Thanks for the reply.  I cross posted on the Forums.  

    social.technet.microsoft.com/.../82e88066-ff6f-445e-bfd5-341b5244d114

Page 1 of 1 (2 items)