Mary,

I haven't personally seen this issue yet.

Classes started here last week so I'm sure it would have made it to me by now 
if this was a wide-spread issue with the incoming freshmen.   The vast majority 
of our Students now choose to bring their own computer vs. purchasing systems 
through the College, so we see quite the spectrum of configurations and most of 
them are able to use NAC without issue.

If this is just a one-off problem I would continue to with general 
troubleshooting.

Check for any other software that might be preventing installation? (e.g., Any 
of the various Security Suites, Malware etc.)
If there is a security suite installed (provided it isn't already the one you 
recommend, and the user hasn't paid for it [i.e. trial software]) then I would 
consider removing it in favor of the anti-malware software you are familiar 
with.

Are you able to install other software packages on this system without issue?
Instead of using the web installer, try to copy the Agent install file to the 
system and then do a Right-Click-"Run as Administrator".

Are you taking advantage of the Web-Based Agent option?  It may be a good 
option for those few machines that aren't playing nice with the full agent.  I 
just started making it available to users about a month ago and it seems to be 
working well for those who have decided to use it instead.

_____________________________
Rob Biddle
Network Systems Engineer / Administrator
College of Mount St. Joseph
(513)244-4893

From: Cisco Clean Access Users and Administrators 
[mailto:[email protected]] On Behalf Of Mary-Ellen Ide
Sent: Tuesday, August 31, 2010 1:34 PM
To: [email protected]
Subject: Re: Cisco NAC installer error 1935

Rob,
We have just encountered the "1935" error during installation.
The OS is Vista.
User is logged on as local admin.
Time/Date are correct.
No versions of the old agent.

Any ideas?
I'm worried that we could possibly see many more of these errors when the 
students arrive.....
Thanks!
Mary


Mary Ide
Internet Security Engineer
Johnson & Wales University
SANS GPEN #1514
SANS GCIH #1794
SANS GWAS #1728
[email protected]<BLOCKED::mailto:[email protected]>

From: Cisco Clean Access Users and Administrators 
[mailto:[email protected]] On Behalf Of Biddle, Rob
Sent: Monday, August 23, 2010 4:08 PM
To: [email protected]
Subject: Re: Cisco NAC installer error 1935

David,

You said you've seen a few instances of this, are all the affected machines 
running the same OS?
Are you logged in as a Local Admin or Regular User?
Time/Date set correctly?
Have you tried a different agent package?
Does this computer by chance have an old version of agent on it already?  I've 
seen instances where a very old agent was present (although not running) which 
was causing installation errors.  In those cases removing the old agent fixed 
the issue.


_____________________________
Rob Biddle
Network Systems Engineer / Administrator
College of Mount St. Joseph

From: Cisco Clean Access Users and Administrators 
[mailto:[email protected]] On Behalf Of McIntosh, David
Sent: Monday, August 23, 2010 3:54 PM
To: [email protected]
Subject: Re: Cisco NAC installer error 1935

I tried out every solution I could find that involves fixing .NET or the 
Windows installer and nothing has worked.  Additionally, when I attempt to run 
the installer with a verbose log I am repeatedly told that the package cannot 
be opened and to contact the vendor.  Has anyone had luck getting around this 
error?

David McIntosh
IT Services
Miami University

From: Cisco Clean Access Users and Administrators 
[mailto:[email protected]] On Behalf Of McIntosh, David
Sent: Friday, August 20, 2010 1:51 PM
To: [email protected]
Subject: Re: Cisco NAC installer error 1935

I received this from a Cisco engineer:

1935 is a Microsoft error:  http://support.microsoft.com/kb/970652

You can either use the tool linked, or follow method 2 from this Microsoft 
article: http://support.microsoft.com/default.aspx?scid=kb%3ben-us%3b946414

I'll try it out and let everyone know.

David

From: Cisco Clean Access Users and Administrators 
[mailto:[email protected]] On Behalf Of Eric Weakland
Sent: Friday, August 20, 2010 1:38 PM
To: [email protected]
Subject: Re: Cisco NAC installer error 1935

We've been seeing this and 1920 errors too.

Thanks for the command for the verbose agent install log.


Eric Weakland, CISSP, CNE, CISM
Director, Information Security
Office of Information Technology
American University
eric at american.edu
202.885.2241

______________________________________
AU IT will never ask for your password via e-mail.
Don't share your password with anyone!



From:        Javier Henderson <[email protected]>
To:        [email protected]
Date:        08/20/2010 01:36 PM
Subject:        Re: Cisco NAC installer error 1935
Sent by:        Cisco Clean Access Users and Administrators 
<[email protected]>
________________________________



On Aug 20, 2010, at 1:04 PM, McIntosh, David wrote:
>
> We have seen a few instances of the NAC installer getting an error midway 
> through installation. I've tried searching for an explanation of the error 
> code, 1935, but I haven't come up with anything.
>
> We are running version 4.7.2 of the CAM, and version 4.7.2.10 of the NAC 
> agent.  Has anyone else experienced this behavior?

David,

Collect a verbose installation log:

msiexec.exe /i agent-install-file.msi /l*v c:\temp\agent-install.log

Replace "agent-install-file.msi" with the actual filename of the agent that you 
are trying to install, after the process completes the file 
C:\temp\agent-install.log will contain a verbose log that will help us 
troubleshoot this problem.

-jav

Reply via email to