SCW plugin installation failure - SMCore package unable to create firewall rule
Applies to
SnapCenter Plugin for Windows (SCW)
Issue
- SCW plugin installation attempts (via Gui and command line) fail due to the SMCore package being unable to create a firewall rule.
- The SMCore_Package log shows an "Access is denied" error when attempting to create the firewall rule for the SMCore service despite the SCW service account being a local administrator on the host:
MSI (s) (F0:10) [16:44:54:067]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI4D0C.tmp, Entrypoint: OpenSMCorePortInFirewall
SFXCA: Extracting custom action to temporary directory: C:\Windows\Installer\MSI4D0C.tmp-\
SFXCA: Binding to CLR version v4.0.30319
Calling custom action WiXCSCA!SysWin32.WiXCSCA.CustomActions.OpenSMCorePortInFirewall
WiXCSCA.OpenPortInFirewall: Begin
WiXCSCA.OpenPortInFirewall: Checking Firewall Service
WiXCSCA.RunExe: Begin
WiXCSCA.RunExe: EXE: C:\Windows\sysnative\netsh.exe
WiXCSCA.RunExe: parameters: advfirewall firewall add rule name="NetApp SnapCenter Host Agent Port" dir=in action=allow profile=Any protocol=TCP localport=8145
WiXCSCA.RunExe: ERROR: An error occurred when trying to start the process.
Access is denied