How to resolve RSA NetWitness Endpoint Windows Agent installation error 1920: Service 'RSA NWE Agent' (NWEAgent) failed to start. Verify that you have sufficient privileges to start system services.
Issue
RSA NetWitness Endpoint agent for windows installation failed and rolled back with the following error.
In the msi installation log, the following errors are found.
In the msi installation log, the following errors are found.
MSI (s) (38:44) [11:08:55:358]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIE38D.tmp, Entrypoint: ServiceConfigure
ServiceConfigure: ServiceConfigure
ServiceConfigure: CustomActionData = /ECATSERVICEEXE=NWEAgent,/ECATSERVICESYS=NWEDriver,/ECATDELAYEDAUTOSTART=,/LOGFORWARDCONF=
ServiceConfigure: Open service: NWEAgent
ServiceConfigure: Success = 1
MSI (s) (38:14) [11:08:55:405]: Executing op: ActionStart(Name=StartServices,Description=Starting services,Template=Service: [1])
MSI (s) (38:14) [11:08:55:405]: Executing op: ProgressTotal(Total=1,Type=1,ByteEquivalent=1300000)
MSI (s) (38:14) [11:08:55:405]: Executing op: ServiceControl(,Name=NWEAgent,Action=1,Wait=1,)
MSI (s) (38:14) [11:09:29:624]: Note: 1: 2205 2: 3: Error
MSI (s) (38:14) [11:09:29:624]: Note: 1: 2228 2: 3: Error 4: SELECT `Message` FROM `Error` WHERE `Error` = 1920
MSI (c) (3C:80) [11:09:29:639]: Font created. Charset: Req=0, Ret=0, Font: Req=, Ret=>
Error 1920. Service 'RSA NWE Agent' (NWEAgent) failed to start. Verify that you have sufficient privileges to start system services.
ServiceConfigure: ServiceConfigure
ServiceConfigure: CustomActionData = /ECATSERVICEEXE=NWEAgent,/ECATSERVICESYS=NWEDriver,/ECATDELAYEDAUTOSTART=,/LOGFORWARDCONF=
ServiceConfigure: Open service: NWEAgent
ServiceConfigure: Success = 1
MSI (s) (38:14) [11:08:55:405]: Executing op: ActionStart(Name=StartServices,Description=Starting services,Template=Service: [1])
MSI (s) (38:14) [11:08:55:405]: Executing op: ProgressTotal(Total=1,Type=1,ByteEquivalent=1300000)
MSI (s) (38:14) [11:08:55:405]: Executing op: ServiceControl(,Name=NWEAgent,Action=1,Wait=1,)
MSI (s) (38:14) [11:09:29:624]: Note: 1: 2205 2: 3: Error
MSI (s) (38:14) [11:09:29:624]: Note: 1: 2228 2: 3: Error 4: SELECT `Message` FROM `Error` WHERE `Error` = 1920
MSI (c) (3C:80) [11:09:29:639]: Font created. Charset: Req=0, Ret=0, Font: Req=, Ret=>
Error 1920. Service 'RSA NWE Agent' (NWEAgent) failed to start. Verify that you have sufficient privileges to start system services.
Resolution
Cause
This error was caused by 30 seconds of timeout of service startup in Windows.
Workaround
Increase the timeout value for the service startup.
- Run 'Registry Editor'.
- Find 'HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control', then right-click.
- Select New > DWORD(32-bit) Value.
- Change the name of the new value to 'ServicesPipeTimeout'.
- Right-click the ServicesPipeTimeout, choose Modify. Edit DWORD Value window opens.
- Change Base to Decimal.
- In the Value field, type the value of time in millisecond: 300000 is 5 minutes.
- Reboot the machine.
Product Details
RSA Product Set: RSA NetWitness EndpointRSA Product/Service Type: NWE Agent
RSA Version/Condition: 11.3.2.1
Approval Reviewer Queue
RSA NetWitness Suite Approval Queue