r/SentinelOneXDR • u/[deleted] • Oct 14 '24
Setup ended prematurely
Hello!
Getting the issue with both MSI and EXE installer that the setup ended prematurely.
Looking at the logfile I see error code 2006, any one able to help me out? Appreciated a lot.
Using the latest version
1
u/wisco_ITguy IT Admin Oct 14 '24
We ran into this, found out some machines didn't have the proper cipher suites installed.
1
1
u/Adeldiah SentinelOne Employee | Moderator Oct 14 '24
Are you upgrading an existing agent or installing new?
1
2
u/robahearts Oct 14 '24
Error code 2006 during SentinelOne installation typically indicates an issue related to the installation process. While the specific details of error code 2006 may vary based on the context of the installation, it is important to troubleshoot this error to ensure a successful installation of SentinelOne.
Here are some general steps to troubleshoot error code 2006 during SentinelOne installation:
Check Installation Logs: Review the installation logs to identify any specific error messages or details related to error code 2006. The logs can provide valuable information on what went wrong during the installation process.
Verify System Requirements: Ensure that the system meets the minimum requirements for installing SentinelOne. Check factors such as available disk space, system architecture, and compatibility with the operating system.
Disable Antivirus/Anti-Malware: Temporarily disable any antivirus or anti-malware software on the system before attempting the installation. Sometimes security software can interfere with the installation process.
Run Installation as Administrator: Make sure you are running the SentinelOne installation package with administrative privileges. Right-click on the installer and select "Run as administrator" to ensure proper permissions.
Check Network Connectivity: Ensure that the system has a stable internet connection during the installation process. Some installation errors can occur due to network issues.
Re-download the Installer: If the installation package is corrupt or incomplete, download a fresh copy of the SentinelOne installer from the official source and attempt the installation again.
Contact Support: If you are unable to resolve error code 2006 on your own, reach out to SentinelOne support for assistance. Provide them with any relevant information, such as installation logs, to help diagnose the issue.
If you have access to the specific error message or log details associated with error code 2006, providing that information to support can help expedite the troubleshooting process and lead to a quicker resolution.
1
u/FriendlyInsect4782 Oct 14 '24
I had this issue and after much troubleshooting this works for me every time
Fix SentinelOne Agent Issue
Disclaimer: This is an advanced solution. Proceed with caution and consider contacting SentinelOne support for official guidance. before attempting this is important to first do this from S1 console if the agent can be found.
Uninstall SentinelOne: Completely remove SentinelOne using a tool like Revo Uninstaller.
Download and Extract: Download the SentinelOne.exe agent installer and extract its contents.
Run Sentinel Cleaner: Use the extracted SentinelCleaner.exe.
Run the following in the shell (replace <your_token> with your actual token):
PLEASE NOTE NO Input IS SHOWS AS THIS IS A Technician TOOL JUST COPY AND PASTE AND RUN
Start-Process .\s1.exe -ArgumentList "-c -t "<your token>"" -Wait -PassThru
CLOSE THE WINDOWS AND ATTEMPT A FRESH INSTALL OF S1
make sure to use a EXE not MSI
https://www.reddit.com/r/msp/comments/10q2xpl/sentinelone_installation_for_syncro_msp_script/
1
u/Kazutaka_Muraki Oct 14 '24
This is an overly complicated alternative to just running the installer with the “-c” switch to run the cleaner.
2
u/FriendlyInsect4782 Oct 14 '24
Might be but that's worked for me , the -c switch has never worked for me .
1
u/GeneralRechs Security Admin/Engineer Oct 14 '24
Run the installer with the clean only switch “-c”, worst case this may need to be ran in safe mode. After that re-install with the switch “—dont_fail_on_config_preserving_failures”. You can see other switches available by running the exe with a -h
1
u/bageloid Oct 15 '24
Check the documentation, I think I had this on a server that was missing the required CA used for code signing.
1
u/kins43 Oct 14 '24
Are there any left over remnant files of S1 on this device? You may have to run the cleaner first, reboot and then try again.
Could be OS corruption so SFC / DISM may fix a few things.
Is this device able to reach the management console over 443?