Initial installation and installation of Product Update (PU) or Security Content Update (SCU) fails with below error message:
Critical Errors -
Registering component with Directory Server
Installing CCS Directory Server
Exception occurred while registering component "%installdir%\Program files(x86)\Symantec\CCS\Reporting and Analytics\Directory Support Services\RegistrationXML\DSS.Component.Registration.xml". Error 'Exception has been thrown by the target of an invocation'.
Following Kerberos error event is logged in the System event log :-
The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server <name>.
Additionally the service account may become locked in AD during installation.
This issue occurs because the Kerberos authentication module generates an incorrect key for the Service account. Therefore, the service encounters authentication failure when it uses the account.
This is a known Kerberos authentication issue and hotfix is available from Microsoft. Please follow below technote to download and apply the hotfix.
There is also a workaround given in the technote as below -
Delete the following registry entry on the problematic computer: