I am upgrading the Symantec Endpoint Protection Manager from 14 MP1 to 14 MP2 on the Windows Server 2008 R2 server. During installation, the installer said "Error occurred" and dialog box showing the error log was displayed. In the logs, the error was related to the keystore.jks under tomcat saying that it was tampered with or password was incorrect. Last month, I have no problem to upgrade from 12.1.6 MP5 to 14 MP1. Is there any problem with the installer of 14 MP2?
I extracted part of logs with error as follows:
2017-06-06 14:31:24.978 THREAD 21 WARNING: Upgrade> unInstallAndInstallApacheService>> UnInstalling / Installing Apache service...
2017-06-06 14:31:24.978 THREAD 21 WARNING: SemServiceManager> uninstallApacheService>> Uninstalling apache service...
2017-06-06 14:31:25.181 THREAD 21 INFO: The Symantec Endpoint Protection Manager API Service service is not started.More help is available by typing NET HELPMSG 3521.
2017-06-06 14:31:25.181 THREAD 21 INFO: SemServiceManager> serviceControl>> Executed command - stop semapisrv, process return value = 2
2017-06-06 14:31:25.181 THREAD 21 INFO: SemServiceManager> waitForServiceTermination>> Waiting for service termination: semapisrv
2017-06-06 14:31:25.181 THREAD 21 INFO: SemServiceManager> getServiceStatus>> Retrieve status for service semapisrv
2017-06-06 14:31:25.368 THREAD 21 INFO: SemServiceManager> getServiceStatus>> The status for semapisrv' service is 1
2017-06-06 14:31:25.384 THREAD 21 INFO: SemServiceManager> waitForServiceTermination>> Service is stopped.
2017-06-06 14:31:25.571 THREAD 21 INFO: The Symantec Endpoint Protection Manager service is not started.More help is available by typing NET HELPMSG 3521.
2017-06-06 14:31:25.571 THREAD 21 INFO: SemServiceManager> serviceControl>> Executed command - stop semsrv, process return value = 2
2017-06-06 14:31:25.571 THREAD 21 INFO: SemServiceManager> waitForServiceTermination>> Waiting for service termination: semsrv
2017-06-06 14:31:25.571 THREAD 21 INFO: SemServiceManager> getServiceStatus>> Retrieve status for service semsrv
2017-06-06 14:31:25.758 THREAD 21 INFO: SemServiceManager> getServiceStatus>> The status for semsrv' service is 1
2017-06-06 14:31:25.774 THREAD 21 INFO: SemServiceManager> waitForServiceTermination>> Service is stopped.
2017-06-06 14:31:25.976 THREAD 21 INFO: The Symantec Endpoint Protection Manager Webserver service is not started.More help is available by typing NET HELPMSG 3521.
2017-06-06 14:31:25.976 THREAD 21 INFO: SemServiceManager> serviceControl>> Executed command - stop semwebsrv, process return value = 2
2017-06-06 14:31:26.928 THREAD 21 INFO: Removing the 'Symantec Endpoint Protection Manager Webserver' serviceThe 'Symantec Endpoint Protection Manager Webserver' service has been removed successfully.
2017-06-06 14:31:27.068 THREAD 21 INFO: getUserRightsForSemWebSrv isSQLDB = false isWindowsAuth = false
2017-06-06 14:31:27.068 THREAD 21 INFO: User rights for semwebsrv = [SeServiceLogonRight]
2017-06-06 14:31:27.224 THREAD 21 INFO: Apache service account is deleted from SeServiceLogonRight option ? true
2017-06-06 14:31:27.224 THREAD 21 WARNING: SemServiceManager> uninstallApacheService>> Uninstalling apache service done! Process return code = 0. Apache service account is deleted from SeServiceLogonRight option ? true
2017-06-06 14:31:27.240 THREAD 21 SEVERE: java.io.IOException: Keystore was tampered with, or password was incorrect
2017-06-06 14:31:27.240 THREAD 21 SEVERE: at sun.security.provider.JavaKeyStore.engineLoad(JavaKeyStore.java:780)
2017-06-06 14:31:27.240 THREAD 21 SEVERE: at sun.security.provider.JavaKeyStore$JKS.engineLoad(JavaKeyStore.java:56)
2017-06-06 14:31:27.240 THREAD 21 SEVERE: at sun.security.provider.KeyStoreDelegator.engineLoad(KeyStoreDelegator.java:224)
2017-06-06 14:31:27.240 THREAD 21 SEVERE: at sun.security.provider.JavaKeyStore$DualFormatJKS.engineLoad(JavaKeyStore.java:70)
2017-06-06 14:31:27.240 THREAD 21 SEVERE: at java.security.KeyStore.load(KeyStore.java:1445)
2017-06-06 14:31:27.240 THREAD 21 SEVERE: at com.sygate.scm.server.util.CertUtil.exportPublicCertificateAsBinary(CertUtil.java:777)
2017-06-06 14:31:27.240 THREAD 21 SEVERE: at com.sygate.scm.server.util.CertUtil.ExportPublicCertificate(CertUtil.java:593)
2017-06-06 14:31:27.240 THREAD 21 SEVERE: at com.sygate.scm.server.util.CertUtil.exportPublicCertificate(CertUtil.java:513)
2017-06-06 14:31:27.240 THREAD 21 SEVERE: at com.sygate.scm.server.util.CertUtil.exportKeyAndCertificate(CertUtil.java:1260)
2017-06-06 14:31:27.240 THREAD 21 SEVERE: at com.sygate.scm.server.upgrade.Upgrade.unInstallAndInstallApacheService(Upgrade.java:3450)
2017-06-06 14:31:27.240 THREAD 21 SEVERE: at com.sygate.scm.server.upgrade.Upgrade.doUpgrade(Upgrade.java:2210)
2017-06-06 14:31:27.240 THREAD 21 SEVERE: at com.sygate.scm.server.upgrade.ui.UpgradeTask.go(UpgradeTask.java:123)
2017-06-06 14:31:27.240 THREAD 21 SEVERE: at com.sygate.scm.server.upgrade.ui.UpgradeProgressPanel$2.construct(UpgradeProgressPanel.java:251)
2017-06-06 14:31:27.240 THREAD 21 SEVERE: at com.sygate.scm.util.SwingWorker$2.run(SwingWorker.java:159)
2017-06-06 14:31:27.240 THREAD 21 SEVERE: at java.lang.Thread.run(Thread.java:748)
2017-06-06 14:31:27.240 THREAD 21 SEVERE: Caused by: java.security.UnrecoverableKeyException: Password verification failed
2017-06-06 14:31:27.240 THREAD 21 SEVERE: at sun.security.provider.JavaKeyStore.engineLoad(JavaKeyStore.java:778)
2017-06-06 14:31:27.240 THREAD 21 SEVERE: ... 14 more
2017-06-06 14:31:27.240 THREAD 21 INFO: CertUtil.ExportPublicCertificateAsBinary>>Couldn't load the keystore from InputStream:
2017-06-06 14:31:27.240 THREAD 21 SEVERE: add2048DhKeyParamsFor1024bitCerts>> Error: F:\Program Files (x86)\Symantec\Symantec Endpoint Protection Manager\tomcat\..\apache\conf\ssl\server.crt DH params cannot be updated, TLS DHE protocol will default to 1024 bit Ephemeral keysjava.security.cert.CertificateException: Could not parse certificate: java.io.IOException: Empty input
2017-06-06 14:31:27.240 THREAD 21 INFO: Couldn't load the Server certificate from file: F:\Program Files (x86)\Symantec\Symantec Endpoint Protection Manager\tomcat\etc\keystore.jks
2017-06-06 14:31:27.240 THREAD 21 SEVERE: java.io.IOException: Keystore was tampered with, or password was incorrect
2017-06-06 14:31:27.240 THREAD 21 SEVERE: at sun.security.provider.JavaKeyStore.engineLoad(JavaKeyStore.java:780)
2017-06-06 14:31:27.240 THREAD 21 SEVERE: at sun.security.provider.JavaKeyStore$JKS.engineLoad(JavaKeyStore.java:56)
2017-06-06 14:31:27.240 THREAD 21 SEVERE: at sun.security.provider.KeyStoreDelegator.engineLoad(KeyStoreDelegator.java:224)
2017-06-06 14:31:27.240 THREAD 21 SEVERE: at sun.security.provider.JavaKeyStore$DualFormatJKS.engineLoad(JavaKeyStore.java:70)
2017-06-06 14:31:27.240 THREAD 21 SEVERE: at java.security.KeyStore.load(KeyStore.java:1445)
2017-06-06 14:31:27.240 THREAD 21 SEVERE: at com.sygate.scm.server.util.CertUtil.exportPrivatekey(CertUtil.java:662)
2017-06-06 14:31:27.240 THREAD 21 SEVERE: at com.sygate.scm.server.util.CertUtil.exportKeyAndCertificate(CertUtil.java:1275)
2017-06-06 14:31:27.240 THREAD 21 SEVERE: at com.sygate.scm.server.upgrade.Upgrade.unInstallAndInstallApacheService(Upgrade.java:3450)
2017-06-06 14:31:27.240 THREAD 21 SEVERE: at com.sygate.scm.server.upgrade.Upgrade.doUpgrade(Upgrade.java:2210)
2017-06-06 14:31:27.240 THREAD 21 SEVERE: at com.sygate.scm.server.upgrade.ui.UpgradeTask.go(UpgradeTask.java:123)
2017-06-06 14:31:27.240 THREAD 21 SEVERE: at com.sygate.scm.server.upgrade.ui.UpgradeProgressPanel$2.construct(UpgradeProgressPanel.java:251)
2017-06-06 14:31:27.240 THREAD 21 SEVERE: at com.sygate.scm.util.SwingWorker$2.run(SwingWorker.java:159)
2017-06-06 14:31:27.240 THREAD 21 SEVERE: at java.lang.Thread.run(Thread.java:748)
2017-06-06 14:31:27.240 THREAD 21 SEVERE: Caused by: java.security.UnrecoverableKeyException: Password verification failed
2017-06-06 14:31:27.240 THREAD 21 SEVERE: at sun.security.provider.JavaKeyStore.engineLoad(JavaKeyStore.java:778)
2017-06-06 14:31:27.240 THREAD 21 SEVERE: ... 12 more
2017-06-06 14:31:27.240 THREAD 21 WARNING: SemServiceManager> installApacheService>> Installing Apache service, serverHome: F:\Program Files (x86)\Symantec\Symantec Endpoint Protection Manager\tomcat, serviceName: semwebsrv
2017-06-06 14:31:27.240 THREAD 21 WARNING: SemServiceManager> installApacheServiceOnce>> Installing Apache service... Current time = Tue Jun 06 14:31:27 CST 2017
2017-06-06 14:31:27.365 THREAD 21 INFO: SemServiceManager> installApacheServiceOnce>> inputParameters = [F:\Program Files (x86)\Symantec\Symantec Endpoint Protection Manager\apache\bin\httpd.exe, -k, install, -n, "semwebsrv", -f, "F:\Program Files (x86)\Symantec\Symantec Endpoint Protection Manager\apache\conf\httpd.conf", -d, "F:\Program Files (x86)\Symantec\Symantec Endpoint Protection Manager\apache\.", -D, WIN64OS]
2017-06-06 14:31:28.394 THREAD 21 INFO: AH00526: Syntax error on line 158 of F:/Program Files (x86)/Symantec/Symantec Endpoint Protection Manager/apache/conf/ssl/ssl.conf:SSLCertificateFile: file 'F:/Program Files (x86)/Symantec/Symantec Endpoint Protection Manager/apache/conf/ssl/server.crt' does not exist or is emptyInstalling the 'semwebsrv' serviceThe 'semwebsrv' service is successfully installed.Testing httpd.conf....Errors reported here must be corrected before the service can be started.
2017-06-06 14:31:28.394 THREAD 21 INFO: SemServiceManager> installApacheServiceOnce>> returnCode = 1