Amp V8.1.7 install fail. Windows Update Required

[ArborAG]

Trying to update some users and getting the following error. The users can install v7. Anything after we get this error.

I see this thread shows the solution but doesn't show where this Time Window is?

https://community.cisco.com/t5/endpoint-security/amp-update-error/td-p/3887920

I have checked the device and it is up to date. It has the required updates:

https://www.cisco.com/c/en/us/support/docs/security/amp-endpoints/214847-amp-for-endpoints-windows-connector-os-c.html

[Matthew Franks]

The issue you linked does not appear to be related.  For information on an installation issue, you can look in C:\ProgramData\Cisco\AMP\immpro_install.log for details or open a case with TAC for assistance.

Thanks,

-Matt

[ArborAG]

Thanks for the info @Matthew Franks 

Here is the .log file (Had to rename to .txt to support upload)

(497167296, +0 ms) Jun 08 11:11:17 [26480]: ERROR: CommonDeleteFile: Wow64DisableWow64FsRedirection failed : 998 : Invalid access to memory location.

[Matthew Franks]

I wouldn't recommend uploading log files here as they may contain sensitive information.  That being said, it looks like permission errors.  Are you running the installer as an Admin?  As I mentioned previously, the best way to get support is to open a TAC case so they can investigate properly.

-Matt

[ArborAG]

Yes I ran this as Admin.

Will open a ticket. Thanks Matt.

[andrgord]

Microsoft now requires A/V drivers signed under the Azure Code Signing.
As of connector version 8.1.3, installation requires OS patches with Azure Code Signed as required by Microsoft.  See Windows Support-for-Azure code signing.

Installation will be able to successfully pass this check if Windows Monthly security updates for Oct 2021 or later are applied to the Windows image.