locked
"The Management Server Service could not import the updated antimalware definition" RRS feed

  • Question

  • I've installed FCS in a one-server topology on Server 2003 R2 SP2. MOM, WSUS, FCS, SQL are all on the same box.

    Everything seems to be working fine but I'm getting an error in the system event log every time I boot up the server:

    Event Type:    Error
    Event Source:    FcsMs
    Event Category:    None
    Event ID:    10002
    Date:        12/8/2010
    Time:        12:50:32 PM
    User:        N/A
    Computer:    AVSERVER
    Description:
    The Management Server Service could not import the updated antimalware definition. The component reporting the error returned the following details:

    Cannot open database "OnePoint" requested by the login. The login failed.

    Details
    Error number: 4060
    Severity level: 11
    State: 1
    Server: AVSERVER\FCSINSTANCE
    Procedure:
    Line: 1
    Result code: 0x80004005
    Connection string:
    Provider=SQLOLEDB.1;Integrated Security=SSPI;Persist Security Info=False;Initial Catalog=OnePoint;Data Source=AVSERVER\FCSINSTANCE;Use Procedure for Prepare=1;Auto Translate=True;Packet Size=4096;Workstation ID=AVSERVER;Use Encryption for Data=False;Tag with column collation when possible=False

    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

    ----

    I googled it and Microsofts solution says it's because I haven't completed the config wizard in the FCS console, and to run it again.

    So I've done this, and all the tests pass, but the error continues to appear, here's the config log from FCS:

    Number of verifications started: [12/8/2010 12:59:52 PM]

    [12/8/2010 12:59:52 PM] Verification(Verifying collection database)


    [12/8/2010 12:59:53 PM] Verification(Verifying access to collection server)


    [12/8/2010 12:59:53 PM] Verification(Verifying management group name)


    [12/8/2010 12:59:54 PM] Verification(Verifying access to reporting server)


    [12/8/2010 12:59:54 PM] Verification(Verifying reporting database configuration)


    [12/8/2010 12:59:59 PM] Verification(Verifying URLs for reports)


    [12/8/2010 1:00:00 PM] Verification(Verifying DAS account)

    Number of verifications completed: [12/8/2010 1:00:00 PM]
    Tasks started: [12/8/2010 1:00:02 PM]
    Root Directory: d:\Program Files\Microsoft Forefront\Client Security\Server
    Current Directory: C:\Documents and Settings\atr
    [12/8/2010 1:00:02 PM] Task(Collection Database Schema)
    Starting this SQL script: d:\Program Files\Microsoft Forefront\Client Security\Server\configure.sql
    [12/8/2010 1:00:02 PM] Task(Collection Database Schema)
    Script version (1 0 16 0)
    Database version (1 0 16 0).
    [12/8/2010 1:00:02 PM] Task(Collection Database Schema)
    The following database does not need to be updated:
    Database: OnePoint
    Server: AVSERVER\FCSINSTANCE
    [12/8/2010 1:00:02 PM] Task(Configure Report Localization)
    Starting this SQL script: d:\Program Files\Microsoft Forefront\Client Security\Server\configure_loc.sql
    [12/8/2010 1:00:02 PM] Task(Configure Report Localization)
    Completed this SQL script: d:\Program Files\Microsoft Forefront\Client Security\Server\configure_loc.sql
    [12/8/2010 1:00:03 PM] Task(Clean Collection Database Add-ons)
    Starting this SQL script: d:\Program Files\Microsoft Forefront\Client Security\Server\Clean_MOM_Ops_SQL_Addons.sql
    [12/8/2010 1:00:03 PM] Task(Clean Collection Database Add-ons)
    Completed this SQL script: d:\Program Files\Microsoft Forefront\Client Security\Server\Clean_MOM_Ops_SQL_Addons.sql
    [12/8/2010 1:00:03 PM] Task(Collection Database Add-ons)
    Starting this SQL script: d:\Program Files\Microsoft Forefront\Client Security\Server\MOM_Ops_SQL_Addons.sql
    [12/8/2010 1:00:04 PM] Task(Collection Database Add-ons)
    Completed this SQL script: d:\Program Files\Microsoft Forefront\Client Security\Server\MOM_Ops_SQL_Addons.sql
    [12/8/2010 1:00:04 PM] Task(Reporting Database Schema)
    Starting this SQL script: d:\Program Files\Microsoft Forefront\Client Security\Server\configure.sql
    [12/8/2010 1:00:04 PM] Task(Reporting Database Schema)
    Script version (1 0 16 0)
    Database version (1 0 16 0).
    [12/8/2010 1:00:04 PM] Task(Reporting Database Schema)
    The following database does not need to be updated:
    Database: SystemCenterReporting
    Server: AVSERVER\FCSINSTANCE
    [12/8/2010 1:00:05 PM] Task(Reporting Database DTS Task)
    Starting this SQL script: d:\Program Files\Microsoft Forefront\Client Security\Server\configuredts.sql
    [12/8/2010 1:00:05 PM] Task(Reporting Database DTS Task)
    Completed this SQL script: d:\Program Files\Microsoft Forefront\Client Security\Server\configuredts.sql
    [12/8/2010 1:00:06 PM] Task(Clean Reporting Database Schema)
    Starting this SQL script: d:\Program Files\Microsoft Forefront\Client Security\Server\Clean_MOM_DWH_SQL_Addons.sql
    [12/8/2010 1:00:06 PM] Task(Clean Reporting Database Schema)
    Completed this SQL script: d:\Program Files\Microsoft Forefront\Client Security\Server\Clean_MOM_DWH_SQL_Addons.sql
    [12/8/2010 1:00:06 PM] Task(Reporting Database Schema)
    Starting this SQL script: d:\Program Files\Microsoft Forefront\Client Security\Server\MOM_DWH_SQL_Addons.sql
    [12/8/2010 1:00:07 PM] Task(Reporting Database Schema)
    Completed this SQL script: d:\Program Files\Microsoft Forefront\Client Security\Server\MOM_DWH_SQL_Addons.sql
    [12/8/2010 1:00:07 PM] Task(Add Management Server SQL Server Login)
    Creating management server SQL Server login to collection database.
    [12/8/2010 1:00:07 PM] Task(Add Management Server SQL Server Login)
    Creating SQL Server login.
    [12/8/2010 1:00:07 PM] Task(Add Management Server SQL Server Login)
    Successfully translated credentials.
    Previous: (null)
    Current: SPACECLAIM\AVSERVER$

    [12/8/2010 1:00:07 PM] Task(Add Management Server SQL Server Login)
    Connection string: Data Source=AVSERVER\FCSINSTANCE;Initial Catalog=OnePoint;Integrated Security=True
    [12/8/2010 1:00:07 PM] Task(Add Management Server SQL Server Login)
    Connection Open succeeded.
    [12/8/2010 1:00:07 PM] Task(Add Management Server SQL Server Login)
    Found existing SQL login information for SPACECLAIM\AVSERVER$.
    [12/8/2010 1:00:07 PM] Task(Add Management Server SQL Server Login)
    Found existing SQL user for SPACECLAIM\AVSERVER$.
    [12/8/2010 1:00:07 PM] Task(Add Management Server SQL Server Login)
    Successfully created SQL Server login.
    [12/8/2010 1:00:07 PM] Task(Add Management Server SQL Server Login)
    Granting management server execute permissions to tables in the collection database.
    [12/8/2010 1:00:07 PM] Task(Add Management Server SQL Server Login)
    Successfully translated credentials.
    Previous: (null)
    Current: SPACECLAIM\AVSERVER$

    [12/8/2010 1:00:07 PM] Task(Add Management Server SQL Server Login)
    Connection string: Data Source=AVSERVER\FCSINSTANCE;Initial Catalog=OnePoint;Integrated Security=True
    [12/8/2010 1:00:07 PM] Task(Add Management Server SQL Server Login)
    Connection Open succeeded.
    [12/8/2010 1:00:07 PM] Task(Add Management Server SQL Server Login)
    Successfully granted SPACECLAIM\AVSERVER$ execute permissions to tables in the collection database.
    [12/8/2010 1:00:07 PM] Task(Add Management Server SQL Server Login)
    Successfully created management server SQL Server login to collection database.
    [12/8/2010 1:00:07 PM] Task(Reporting Server Timeout Adjustments)
    Starting FCS reports timeout.
    [12/8/2010 1:00:09 PM] Task(Reporting Server Timeout Adjustments)
    Completed FCS reports timeout.
    [12/8/2010 1:00:10 PM] Task(Import Reports on the Reporting Server)
    Starting Import Reports on the Reporting Server.
    [12/8/2010 1:00:10 PM] Task(Import Reports on the Reporting Server)
    Starting d:\Program Files\Microsoft Forefront\Client Security\Server\rptutil.exe.
    [12/8/2010 1:00:10 PM] Task(Import Reports on the Reporting Server)
    Process command 'd:\Program Files\Microsoft Forefront\Client Security\Server\rptutil.exe'
    [12/8/2010 1:00:10 PM] Task(Import Reports on the Reporting Server)
    Process arguments '/action:import /file:"d:\Program Files\Microsoft Forefront\Client Security\Server\sasreport.xml" /url:http://AVSERVER/ReportServer$FCSINSTANCE/ReportService.asmx /noprompt'
    [12/8/2010 1:01:10 PM] Task(Import Reports on the Reporting Server)

    !!Warning!!
    The reporting web server has not been configured to use SSL.
    If you continue, there may be sensitive information that will get transmitted over the wire.
    Press any key to continue, or Q to quit.
    Successfully imported reports.
    File Path: d:\Program Files\Microsoft Forefront\Client Security\Server\sasreport.xml


    [12/8/2010 1:01:10 PM] Task(Import Reports on the Reporting Server)
    Process d:\Program Files\Microsoft Forefront\Client Security\Server\rptutil.exe completed.
    [12/8/2010 1:01:11 PM] Task(Reporting Server Adjustments)
    Starting reporting server adjustments.
    [12/8/2010 1:01:11 PM] Task(Reporting Server Adjustments)
    Setting data source of collection database.
    Server: AVSERVER\FCSINSTANCE
    User: spaceclaim\fcs-das
    [12/8/2010 1:01:11 PM] Task(Reporting Server Adjustments)
    Setting data source of the reporting database.
    Server: AVSERVER\FCSINSTANCE
    User: spaceclaim\fcs-das
    [12/8/2010 1:01:11 PM] Task(Reporting Server Adjustments)
    Marking FCS sub-reports as hidden.
    [12/8/2010 1:01:11 PM] Task(Reporting Server Adjustments)
    Hiding report elements.
    [12/8/2010 1:01:12 PM] Task(Reporting Server Adjustments)
    Completed reporting server adjustments.Number of tasks completed: [12/8/2010 1:01:13 PM]

     

    I've checked permissions on the OnePoint database in SQL but I don't know exactly what is required. They look ok to me but if someone could confirm what the permissions should look like for:

    FCS-DAS domain account

    NETWORK SERVICE

    LOCAL SERVICE

     

    Thanks!

    Wednesday, December 8, 2010 6:08 PM

All replies

  • Hi,

    Thanks for the post.

    Did you change the ports for the reporting directories on the IIS?  ForeFront install will fail if the reporting server is setup to require SSL.

    In addition, please check if the solution provided in the following article could fix this error.

    https://connect.microsoft.com/site27/feedback/details/252792/post-installation-configuration-stops-at-the-importing-reports-tasks?wa=wsignin1.0

    Thanks,

    Miles


    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
    Thursday, December 9, 2010 9:14 AM
  • Hi,

    Thanks for the post.

    Did you change the ports for the reporting directories on the IIS?  ForeFront install will fail if the reporting server is setup to require SSL.

    In addition, please check if the solution provided in the following article could fix this error.

    https://connect.microsoft.com/site27/feedback/details/252792/post-installation-configuration-stops-at-the-importing-reports-tasks?wa=wsignin1.0

    Thanks,

    Miles


    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

    I've checked IIS and nothing is set to require SSL so I don't think it's that.

    And that link you've pasted, it looks like that guy was having trouble actually completing the config wizard in FCS. Whereas my config wizard, and FCS install, complete with no problems, I get all green checks.

    From the error, it seems like it's a problem with the The Management Server Service access to login to the OnePoint database. How can I find out what credentials this service is using to connect to the database?

    I've gone into SQL and add FCS-DAS, NETWORK SERVICE, and LOCAL SERVICE all of the roles across the SQL server (bulk admin, dbcreator, diskadmin etc) as a test, but it hasn't helped at all.

    :(

    Thursday, December 9, 2010 4:27 PM
  • If someone could just let me know how the SQL security needs to be set up that would give me something to play around with.

    I'd like to know which logins and roles are required from the following:

    NT AUTHORITY\LOCAL SERVICE

    NT AUTHORITY\NETWORK SERVICE

    NT AUTHORITY\SYSTEM

    OURDOMAIN\FCS-DAS

    And also how their permissions for the OnePoint database itself should be set.

    If some kind person could please look on their own FCS installation and let me know what they have, I'd really appreciate it.

    Friday, December 10, 2010 3:51 PM