Troubleshooting Tip: FortiClient Deployment Error 150 for Endpoints on EMS

Description

This article describes that in some cases, EMS can unable to deploy or upgrade FortiClient on the endpoints and EMS can generate Deployment Error 150 for those endpoints.

This error is a generic error and usually happens when the connection between EMS and the problematic endpoint cannot be established properly.

Scope

FortiClient EMS Server.
Important: Note that FortiClient EMS does not support the initial deployment and only supports the upgrade process.

Solution

This can be caused by several things which I will be stating below. If deployment error 150 are received on the EMS server for the endpoints, it is useful to ensure the following:

1. EMS and the problematic endpoint can solve each other with FQDN.

2. EMS and the problematic endpoint can ping each other with FQDN.

3. Task Scheduler and Remote Registry are running on the problematic endpoint and their StartUp type is Automatic.

4. Windows Firewall is turned off on the problematic endpoint.

5. There is no third-party security product has been installed on the problematic endpoint (a third-party security product can conflict with the processes of FortiClient).

6. There is no third-party security product has been installed on the EMS Server (a third-party security product can conflict with the processes of the EMS Server).

7. Check the TCP 135, 445, and 10443 ports between EMS Server and the problematic endpoint.

Related documents:

• See Required services and ports in the EMS Administrator Guide to identify incoming or outgoing Protocols/Ports to be allowed.