CA Client Automation

I do have a problem that Software Inventory Configuration Job fails on multiple workstations. Even on completely newly installed wks with ITCM Agents installed by InfraDeployWiz. In TRC_AMRSS_0.log on the server I see some errors like:

140318-08:11:24.7805515L|002812|00000b00|RSS |RSS |Debug.cpp |000160|ERROR | start Recived VERIFY_SIG with filesize 0
140318-08:11:24.7805814L|002812|00000b00|RSS |RSS |Debug.cpp |000160|ERROR | end Recived VERIFY_SIG with filesize 0

So I installed patch T5IZ382.caz and hoped it would solve my issue. But it did not help. I also found this error:

140318-11:41:25.8803204L|002748|00000af0|RSS       |cfCafApi        |                    |000000|ERROR  | CFUtils::lookupENCAddress: the ENC API library failed to initialise

maybe this is the cause for my problem? where else can I check? any logs on server or client? thanks in advance

Hello,

These errors seen in TRC_AMRSS_0.log could be ignored. They are not related to the Software Inventory job.

You should check on the client machine following logs :

DSM\logs\TRC_AMAGENT_*.log

DSM\logs\TRC_UAM_AMSOFTSCAN_*.log

DSM\logs\TRC_UAM_AMSWSIGSCAN_*.log

You could also check in directory DSM\Agent\units\00000001\uam if you could see a big file W00*.XML

Thanks.

Regards,

Jean-Yves

Thanks for your reply JY,

in TRC_AMAGENT_0.log i see:

150318-07:30:03.9278261L|012164|00000754|amagent |co_capi |SessionMessaging.cpp|000262|ERROR | SmTransact error smstatus 0x33205
150318-07:30:03.9278748L|012164|00000754|amagent |co_capi |co_capi.cpp |009306|ERROR | GetIPAddressListByName SendWithReply failed with code 209413

and

150318-07:30:13.1982132L|012164|00000754|amagent |cserverm | |000000|ERROR | SmTransact() failed, error code=209410.
150318-07:30:13.2145753L|012164|00000754|amagent |SrvDB_Helper |SrvDB_Helper |000000|ERROR | Managed to load srvdb but initialization failed 8000FFFF

and in TRC_UAM_AMSWSIGSCAN_0.log I see this error:

150318-07:30:19.4674853L|008668|00001170|AMSWSIGSCA|intellisig_cert | |000000|ERROR | IntellisigCert::init: Failed to LoadPeerPublicIdentity
150318-07:30:48.3199222L|008668|00001170|AMSWSIGSCA|AMSWSIGSCAN | |000000|ERROR | Intellisig Integrity Checker failed to initalise
150318-07:30:48.3219989L|008668|00001170|AMSWSIGSCA|AMSWSIGSCAN | |000000|ERROR | Intellisig Integrity Checker failed to initalise

and no W00*.xml file in folder!

deleting all subfolders under ...\agent\units\ and runnind a scan again, gave me two W00*.xml but same errors in log files!

looks like I just found the solution myself

Intellisig error "The integrity checker generated - CA Knowledge 

after running "cacertutil import -i:itrm_dsm_mngrsgn.cer -it:x509v3 -t:ManagerSigner" Inventory Scanner ran successfully on my test client! Now I need to verify on more clients. Can I create this command in a SD-Job? e.g. in a batch file?

Hello,

Yes commands described in Intellisig error "The integrity checker generated - CA Knowledge  could be executed in a batch file using a SD Package :

example :

cd "%SDROOT%\..\bin"

cacertutil import -i:itrm_dsm_mngrsgn.cer -it:x509v3 -t:ManagerSigner

Regards,

Jean-Yves

perfect. thanks again!

But what is the solution for the problem so that it works out of the box as before ? Adding this as an additional package can only be a workaround.

I am trying to execute cacertutil commands in a SD Package but I always get exit/error code 65535!

my batch:

cd "%SDROOT%\..\bin"
cacertutil import -i:itrm_dsm_mngrsgn.cer -it:x509v3 -t:ManagerSigner
cacertutil import -i:itrm_dsm_mngrsgn_sha2.cer -it:x509v3 -t:ManagerSigner

the job-output after executing:

Z:\activate\4058B14F-EB1A-45DE-AB9A-442DC09C0B32.itm\1.vol>cd "C:\Program Files (x86)\CA\DSM\SD\..\bin"

Z:\activate\4058B14F-EB1A-45DE-AB9A-442DC09C0B32.itm\1.vol>cacertutil import -i:itrm_dsm_mngrsgn.cer -it:x509v3 -t:ManagerSigner
Import wird durchgefuhrt...

FEHLER: Zertifikatsdatei konnte nicht gefunden oder geoffnet werden

Z:\activate\4058B14F-EB1A-45DE-AB9A-442DC09C0B32.itm\1.vol>cacertutil import -i:itrm_dsm_mngrsgn_sha2.cer -it:x509v3 -t:ManagerSigner
Import wird durchgefuhrt...

FEHLER: Zertifikatsdatei konnte nicht gefunden oder geoffnet werden

I checked that certificate files are in the right folder on the client. What else am I doing wrong? thanks in advance

Since you are in Z: drive the cd command to move to C: drive must contain the  switch "/d", so your batch becomes:
cd /d "%SDROOT%\..\bin"

cacertutil import -i:itrm_dsm_mngrsgn.cer -it:x509v3 -t:ManagerSigner
cacertutil import -i:itrm_dsm_mngrsgn_sha2.cer -it:x509v3 -t:ManagerSigner

Rgds, Alessandro

perfect. thank you very much! now it works