Novell is now a part of Micro Focus

My Favorites


Please to see your favorites.

ZCM 11.2.x upgrade fails on FDE Encrypted drives

This document (7010468) is provided subject to the disclaimer at the end of this document.


Novell ZENworks Configuration Management 11.2 System Update
Novell ZENworks Endpoint Security Management 11.2 Full Disk Encryption
Novell ZENworks Full Disk Encryption


Upgrading device that has ZENworks Full Disk Encryption installed (messages below show 11.2.1, but the same issue applies to 11.2.2 and 11.2.3)

Failure when installing 'novell-zenworks-fde-sec-'. 
'novell-zenworks-fde-sec-' shows the following:

a) If a FDE policy is being enforced,

MSI (s) (E0:D0) [07:28:58:219]: Doing action: Error_NeedPassword
Action ended 7:28:58: FSE_MSI_Branding. Return value 1.
Action start 7:28:58: Error_NeedPassword.
MSI (s) (E0:D0) [07:28:58:220]: Product: Novell® Full Disk Encryption -- 
Please enter the administration password via the property ADMINPWD or UPGDSCRIPT. The upgrade procedure will now abort.

Please enter the administration password via the property ADMINPWD or UPGDSCRIPT. The upgrade procedure will now abort.
Action ended 7:28:58: Error_NeedPassword. Return value 3.
Action ended 7:28:58: INSTALL. Return value 3.

MSI (s) (E0:D0) [07:28:58:230]: Note: 1: 1708
MSI (s) (E0:D0) [07:28:58:230]: Product: Novell® Full Disk Encryption --  Installation failed.

MSI (s) (E0:D0) [07:28:58:230]: Windows Installer installed the product.
Product Name: Novell® Full Disk Encryption. Product Version:
Product Language: 1033. Manufacturer: SECUDE AG. Installation success or error status: 1603.


This is fixed in version 11.2.4 - see TID 7012027 "ZENworks Configuration Management 11.2.4 - update information and list of fixes" which can be found at

Workaround: re-run the msi, enter the admin password from the 'Emergency Recovery' tab of the device from ZCC (this is a unique password for each device).

Alternatively, run the MSI on the managed device before upgrading to 11.2.x, then the upgrade should go through without error.

If desired, the "failed" device can marked as Ignored in the System Update, if required for baselining purposes, but the agent will still report as the old version, not the new.


This was an oversight during Novell's testing of this procedure. The upgrade requires the ERI admin password, which is not available to the System Update mechanism.


This Support Knowledgebase provides a valuable tool for NetIQ/Novell/SUSE customers and parties interested in our products and solutions to acquire information, ideas and learn from one another. Materials are provided for informational, personal or non-commercial use within your organization and are presented "AS IS" WITHOUT WARRANTY OF ANY KIND.

  • Document ID:7010468
  • Creation Date:17-JUL-12
  • Modified Date:28-OCT-13
    • NovellZENworks Configuration Management
      ZENworks Endpoint Security Management
      ZENworks Full Disk Encryption

Did this document solve your problem? Provide Feedback