Altiris™ Out Of Band Management Component 7.1 From Symantec

Transcript

Altiris™ Out of Band Management Component 7.1 from Symantec™ Release Notes Altiris™ Out of Band Management Component 7.1 from Symantec™ Release Notes The software described in this book is furnished under a license agreement and may be used only in accordance with the terms of the agreement. Legal Notice Copyright © 2011 Symantec Corporation. All rights reserved. Symantec and the Symantec Logo, Altiris, and any Altiris or Symantec trademarks used in the product are trademarks or registered trademarks of Symantec Corporation or its affiliates in the U.S. and other countries. Other names may be trademarks of their respective owners. The product described in this document is distributed under licenses restricting its use, copying, distribution, and decompilation/reverse engineering. No part of this document may be reproduced in any form by any means without prior written authorization of Symantec Corporation and its licensors, if any. THE DOCUMENTATION IS PROVIDED "AS IS" AND ALL EXPRESS OR IMPLIED CONDITIONS, REPRESENTATIONS AND WARRANTIES, INCLUDING ANY IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE OR NON-INFRINGEMENT, ARE DISCLAIMED, EXCEPT TO THE EXTENT THAT SUCH DISCLAIMERS ARE HELD TO BE LEGALLY INVALID. SYMANTEC CORPORATION SHALL NOT BE LIABLE FOR INCIDENTAL OR CONSEQUENTIAL DAMAGES IN CONNECTION WITH THE FURNISHING, PERFORMANCE, OR USE OF THIS DOCUMENTATION. THE INFORMATION CONTAINED IN THIS DOCUMENTATION IS SUBJECT TO CHANGE WITHOUT NOTICE. Symantec Corporation 350 Ellis Street Mountain View, CA 94043 http://www.symantec.com Altiris™ Out of Band Management Component 7.1 from Symantec™ Release Notes This document includes the following topics: ■ About Out of Band Management Component ■ What's new in Out of Band Management Component 7.1 ■ General installation and upgrade information ■ System requirements ■ Known issues ■ Fixed issues ■ Other things to know ■ Documentation that is installed ■ Other information About Out of Band Management Component Altiris™ Out of Band Management Component software lets you discover and configure computers with ASF, DASH, and Intel® AMT technologies for out-of-band management. Out-of-band management is the ability to manage computers 4 Altiris™ Out of Band Management Component 7.1 from Symantec™ Release Notes What's new in Out of Band Management Component 7.1 regardless of the state of their power, operating system, or management agents and to perform management tasks that would normally require a visit to the client computer. This product is part of the following suites: ■ Altiris™ Client Management Suite from Symantec™ ■ Altiris™ IT Management Suite from Symantec™ What's new in Out of Band Management Component 7.1 In the 7.1 release of Out of Band Management Component, the following new feature is introduced: ■ Integrates with Intel SCS 5.4 to provide full support for Microsoft SQL Server 2008. General installation and upgrade information You install this product by using the Symantec Installation Manager. You can download the installation files directly to your server or you can create offline installation packages. For more information, see the IT Management Suite Implementation Guide at http://www.symantec.com/docs/DOC3464. For more information about migrating from 6.x and 7.0 to 7.1, see the following documentation resources: ■ IT Management Suite Migration Guide version 6.x to 7.1 at http://www.symantec.com/docs/DOC3549 ■ IT Management Suite Migration Guide version 7.0 to 7.1 at http://www.symantec.com/docs/DOC3550 System requirements Out of Band Management Component has the following requirement: ■ Symantec Management Platform 7.1 Altiris™ Out of Band Management Component 7.1 from Symantec™ Release Notes Known issues Known issues The following are known issues for this release. If additional information about an issue is available, the issue has a corresponding Article link. For the most up-to-date information, latest workarounds, and other technical support information about this solution, see the Technical Support knowledge base. The known issues are separated into the following groups: ■ Product installation issues See Table 1-1 on page 5. ■ Client installation issues See Table 1-2 on page 6. ■ Site server issues See Table 1-3 on page 7. ■ Other known issues See Table 1-4 on page 8. Table 1-1 Product installation issues Issue Description Out of Band site server files are always installed to C:\Altiris OOB Configuration. Regardless of the location you chose for the Symantec Management Platform and Out of Band Management Component installation, some of the Out of Band site server components are always installed to C:\Altiris OOB Configuration. That location is required for Intel SCS to function properly. Article link 5 6 Altiris™ Out of Band Management Component 7.1 from Symantec™ Release Notes Known issues Client installation issues Table 1-2 Issue Description Out of Band Task Agent does The Out of Band Task Agent package includes a vendor-specific ASF not function properly with sub-agent. It may be that the computer has the sub-agent installed already. ASF sub-agent. By default, the Out of Band Task Agent installation task does not overwrite the existing ASF sub-agent. If the Out of Band Task Agent does not function properly with the existing ASF sub-agent, you can change the default settings to allow the ASF sub-agent to be upgraded at the time of the Out of Band Task Agent installation. To change the settings to allow an ASF sub-agent upgrade 1 On your Notification Server computer, browse to C:\Program Files\Altiris\Notification Server\NSCap\Bin\Win32\X86\Out of Band Management\Agent\. 2 Open the ASFSetup.ini. 3 Under [Options], change Upgrade=0 to Upgrade=1. 4 Save the file. After the change, the section should look like this: [Options] Upgrade=1 Downgrade=0 5 In the Symantec Management Console, navigate to Settings > All Settings > Agents/Plug-ins > Remote Management > Out of Band Management > Out of Band Task Agent Package, and click the Save changes and Update Distribution Points buttons. 6 Re-run the Out of Band Task Agent - Install policy on a schedule. Article link Altiris™ Out of Band Management Component 7.1 from Symantec™ Release Notes Known issues Client installation issues (continued) Table 1-2 Issue Description Article link Firewall setting prevents Intel ASF Agent from working properly. The default firewall settings on a Microsoft Windows Vista computer prevent the Intel ASF Agent (that is installed with Out of Band Task Agent) from pinging the traps destination address. Consequently, the management console cannot be contacted, and the Intel ASF Agent goes into safe mode. Managing this computer remotely is not possible by using the ASF technology. To make Intel ASF Agent work, configure the firewall to accept incoming Internet Control Message Protocol (ICMP) connections. 1 On a Windows Vista computer, open the Control Panel. 2 Click Administrative Tools > Windows Firewall with Advanced Security. 3 Click Inbound Rules, and click Action > New Rule. 4 In the wizard, select Custom rule, and click Next. 5 Select All programs, and click Next. 6 On the Protocol and Ports page, select ICMPv4 protocol type, and click Customize. 7 On the Customize ICMP Settings page, click Specific ICMP types, select Type 0, select Code 0, click Add, and click OK. 8 Click Next, and skip to the last page. 9 On the last page, enter a name for this rule (for example, ICMP ASF Agent), and click Finish. Broadcom ASF does not have this issue. Table 1-3 Site server issues Issue Description AMTConfig service does not start after installing the Out of Band site server to a computer in another domain or sub-domain. If you want to install the Out of Band site server to a computer in another domain or in another sub domain, make sure the application identity account (the account that you used to install Symantec Management Platform) is registered on the Out of Band site server candidate computer as a local administrator. If you do not do that, the AMTConfig service will not start. Article link 7 8 Altiris™ Out of Band Management Component 7.1 from Symantec™ Release Notes Known issues Table 1-3 Site server issues (continued) Issue Description Article link Intel SCS fails to start. When you change the Out of Band Site Service settings (for example, you want to configure the service to use another database), the Intel SCS reconfiguration process starts. Sometimes after reconfiguration, the AMTConfig service fails to start. If that happens, you can start the AMTConfig service manually or restart the computer on which Intel SCS is installed. Automatic uninstall of Out of Band Management Component works only on the default Out of Band site server on the Notification Server computer. When you uninstall Out of Band Management Component, only the default Out of Band site server that is located on the Notification Server computer is uninstalled automatically. You must uninstall other Out of Band site servers manually. Out of Band Site Service Agent does not uninstall from target computer when both Intel SCS policies are turned on. When both Intel SCS policies (Uninstall and Out of Band Site Service Agent - Uninstall) are turned on, Out of Band Site Service Agent might not uninstall from the target computer. To prevent that, use only the Out of Band Site Service Agent - Uninstall policy when you want to uninstall an Out of Band site server. You can also uninstall the Out of Band Site Service Agent manually by running the following command on the target computer: msiexec.exe /x {66ab3346-833d-4543-86a0-f2d1cfd8be01} /q REBOOT="ReallySuppress" REBOOTPROMPT="S" Table 1-4 Issue Other known issues Description Intel SCS is unable to install Intel SCS can install IIS component on only the English version of Microsoft IIS component on Windows Server 2008 R2 operating system . non-English Operating Systems. Active Directory integration Active Directory integration cannot be migrated during the migration from information is not available the Out-of-Band Management Component 6.2 to version 7.1. You must after upgrade. manually reinitiate the Active Directory integration on the Configure General Settings page in the Out of Band Management Component portal. Out of band site server inventory task fails on the logged off client. Out of band site server inventory task fails by timeout when you perform it on the logged off client. However, you can successfully perform it on the logged on clients. Article link Altiris™ Out of Band Management Component 7.1 from Symantec™ Release Notes Known issues Table 1-4 Other known issues (continued) Issue Description Changes to the Worker threats value do not take effect immediately. When you change the Worker threads value on the General page, the settings are saved successfully, but the new number does not take effect until the Intel SCS service is restarted. Intel SCS tasks fail after using Real-Time System Manager Solution to change the Intel AMT administrator password. With the Altiris Real-Time System Manager Solution software, you can change the Intel AMT administrator name and password. If you change the password, Intel SCS tasks fail on that computer because Out of Band Management Component tries to connect to the computer using the old credentials that are stored in the database. To resolve this issue, you can either create a new connection credentials profile with the new password (using Credentials Manager), or change the password back. You can also reset the password by fully unconfiguring the computer. You can do that manually from the MEBx or using the Real-Time Console Infrastructure Update Intel AMT Network Settings task. After you unconfigure the computer, run the setup and the configuration process again. Chinese or Japanese cannot be used to name a profile. Double-byte characters are not supported and cannot be used to name a profile. Use English characters instead. Client Task returns incorrect status if the ASF Management Application is not installed. Normally, if the ASF Management Application is not present on a client computer, the application gets installed when you run the Out of Band Task Agent - Install policy. If the ASF Management Application was manually uninstalled from the client computer after the Out of Band Task Agent installation, the Get ASF Inventory and Update ASF Settings out-of-band tasks fail to run, but they are reported as successful. The "Switch to AMT" option The Delayed Setup and Configuration policy includes the Switch to AMT does not work if computer is option that allows for the automatic switching of an AMT system from in "ASF" state. "None" or "ASF" state to "AMT". This works if the current state is set to "None" but does not work if the state is set to "ASF". A HeciWin error appears in the DBwin log when that occurs. You can access the MEBx and manually set the Manageability Feature to "AMT". Initializing Intel AMT computers with a USB key fails. To initialize the Intel AMT computers using a USB key, make sure that the key is formatted to FAT16 and the exported setup.bin file is the only file on the key. Symantec recommends that you use USB keys no larger than 512MB. Article link 9 10 Altiris™ Out of Band Management Component 7.1 from Symantec™ Release Notes Known issues Other known issues (continued) Table 1-4 Issue Description Error occurs when installing Out of Band Management Component when SQL is in Windows Authentication mode. Intel SCS requires that Microsoft SQL Server be configured in mixed (Windows Authentication and SQL Server Authentication) mode. If Out of Band Management Component detects that SQL is not in the mixed authentication mode, an error displays in the Altiris log and Intel SCS pages in the Symantec Management Console is not accessible. You must change the authentication mode and restart the SQL Server. Intel SCS configuration pages It can happen that after installation or upgrade, Intel SCS configuration are inaccessible in HTTP pages (Intel AMT Systems, Profile Assignments, etc.) are not accessible mode. from the Symantec Management Console. The following error is displayed in the console: "The request failed with HTTP status 403: Forbidden". This issue can occur when the Web site that hosts the Symantec Management Console is not configured to use SSL. That is because Intel SCS mistakenly sets the AMTSCS directory of the Web site into secure mode. To fix this problem, do the following: 1 Open the IIS manager, and open properties for the AMTSCS virtual directory. 2 On the Directory Security tab, click Edit, and then uncheck Require secure channel (SSL). A free VeriSign Remote A free VeriSign SSL trial certificate cannot be used for Remote Configuration. Configuration certificate is You must purchase a commercial certificate. not supported (Intel AMT 3.0 and later). Send Hello Message task returns incorrect result. Sometimes the Send Hello Message task can be incorrectly reported as failed. Incorrect number of requests On the Intel AMT Systems page, when you click a symbol on the toolbar shown. (for example, the Synchronize clock symbol), the number of requests that queued is always displayed as 1, regardless of the number of systems selected. "The connection with the server Database has been lost" error occurs. If you see the "The connection with the server Database has been lost" error on the Out of Band Management Component pages in the Symantec Management Console, check that the SQL server is running and the Intel SCS database (with "_IntelAMT" in its name) is created on the SQL server. If the database is not created, see the Intel SCS database name limitation issue for instructions on how to re-create the database. Article link Altiris™ Out of Band Management Component 7.1 from Symantec™ Release Notes Known issues Other known issues (continued) Table 1-4 Issue Description Creation of Intel SCS database fails due to name limitation. Intel SCS database must not start with a digit. Only alphanumeric characters and the underscore "_" character can be used to name the Intel SCS database. Out of Band Management Component creates the Intel SCS database by appending "_IntelAMT" to the name of the Symantec CMDB (for example, Symantec_CMDB_IntelAMT). If at the time of Symantec Management Platform installation, you created a database with special characters in its name (for example, the dash character "-"), the creation of the Intel SCS database fails. The "The connection with the server Database has been lost" error appears on the Out of Band Management Component pages. 1 In the Symantec Management Console, on the Settings menu, click Notification Server > Site Server Settings. 2 In the left pane, click Site Management > Settings > OOB Service > OOB Service Configuration. 3 On the Out of Band Management Component Site Service page, in the Database Name box, type a new name for the Intel SCS database. You can use only alphanumeric characters and the underscore character. 4 Click Save changes. 5 In the dialog box, click Yes. The Intel SCS is reinstalled using the new database settings. If the database does not exist, it is created automatically. Selected action on Intel AMT On the Intel AMT Systems page, it is possible to do a search and display the Systems page is performed results in the grid. Note that if you click a symbol on the toolbar and then on all systems. select All systems, the action you selected performs on all systems, not only on the systems that displayed in the search results. Contents of dbo.csti_log Currently, there is no automated way to purge the contents of the dbo.csti_log table in the Intel SCS database. This log can become very cannot be purged automatically. large. You have to clean the log manually. DASH Configuration Settings report shows incorrect information. The Session Timeout value is not shown correctly in the DASH Configuration Settings report. You can view the correct value in the Resource Manager. To view the value, in the Resource Manager, on the View menu, click Inventory. Then, in the tree view pane, click Out of Band Management > OOB Broadcom DASH General Settings. Article link 11 12 Altiris™ Out of Band Management Component 7.1 from Symantec™ Release Notes Fixed issues Other known issues (continued) Table 1-4 Issue Description Get ASF/DASH 1 Configuration Inventory 2 task does not collect all data. 3 Resource Synchronization setting does not work. Article link The ASF 1.0 Compatibility value is always displayed as "false". ASF version is not collected from the Broadcom ASF computers with DASH 1.14 firmware. OOB Broadcom DASH Settings node displays the Operator account in the Administrator account username field. Administrator account data is not collected. Symantec recommends that you do not use the setting on the Resource Synchronization page. Instead, use real domain names when configuring a profile assignment. Fixed issues The following are the previous issues that were fixed in this release. If additional information about an issue is available, the issue has a corresponding Article link. Table 1-5 Issue Fixed issues Description 64-bit operating systems are Do not use computers with a 64-bit operating system for the Out of Band not supported. site server installation. Cannot install Out of Band Out of Band site server installation does not support IIS Web sites other site server on a custom Web than the default "Default Web Site". If you want to install Out of Band site site. server on a computer with a custom Web site or with an internationalized operating system, you must install Intel SCS manually. Article link Altiris™ Out of Band Management Component 7.1 from Symantec™ Release Notes Other things to know Fixed issues (continued) Table 1-5 Issue Description Article link Intel SCS 5.1 does not support Microsoft SQL Server 2008. You can install Symantec Management Platform, Out of Band Management Component, and Altiris suites on SQL Server 2008; however, Intel SCS will not work and Intel SCS pages will not load in the Symantec Management Console. To make Out of Band Management Component work, install SQL Server 2005 on another computer in your environment, and then configure Intel SCS to use that SQL Server 2005. To configure Intel SCS to use another SQL Server 1 In the Symantec Management Console, on the Settings menu, click Notification Server > Site Server Settings. 2 In the left pane, click Site Management > Settings > OOB Service > OOB Service Configuration. 3 On the OOB Site Service page, in the SQL Server box, enter the host name of the SQL Server 2005 computer that you want to use. 4 Click Save changes. Intel SCS will be reinstalled using the new settings. Other things to know The following are things to know about this release. If additional information about an issue is available, the issue has a corresponding Article link. Table 1-6 Other things to know Issue Description Hierarchy is not supported. Out of Band Management Component 7.1 does not support hierarchy and replication. Article link 13 14 Altiris™ Out of Band Management Component 7.1 from Symantec™ Release Notes Documentation that is installed Documentation that is installed Table 1-7 Documentation that is included into the product installation Document Description Location Help Information about how to use this product. The Documentation Library, which is available in the Symantec Management Console on the Help menu. Help is available at the solution level and at the suite level. Context-sensitive help is available for most screens in the Symantec This information is available in HTML Management Console. help format. You can open context-sensitive help in the following ways: User Guide Information about how to use this product. This information is available in PDF format. Symantec Management Platform Help Information about how to use the Symantec Management Platform ■ The F1 key when the page is active. ■ The Context command, which is available in the Symantec Management Console on the Help menu. The Documentation Library, which is available in the Symantec Management Console on the Help menu. The Documentation Library provides a link to the PDF User Guide on the Symantec support Web site. ■ Supported Products page ■ Same as above. Altiris™ Out of Band Management Component 7.1 from Symantec™ Release Notes Other information Other information Table 1-8 Information resources that you can use to get more information Document Description Location Implementation Guide Information about how to install, configure, and implement this product. ■ This information is available in PDF format. The Documentation Library, which is available in the Symantec Management Console on the Help menu. The Documentation Library provides a link to the PDF Implementation Guide on the Symantec support Web site. ■ Supported Products page ITMS 7.1 Implementation Guide Information about capacity http://www.symantec.com/docs/DOC3464 recommendations, design models, scenarios, test results, and optimization best practices to consider when planning or customizing ITMS. Symantec Management Platform User Guide Information about using the Symantec Management Platform. Symantec Management Platform Documentation page Symantec Management Platform Release Notes Information about new features and important issues in the Symantec Management Platform. Symantec Management Platform Documentation page Symantec Management Platform Installation Guide Information about using Symantec Installation Manager to install the Symantec Management Platform products. http://go.symantec.com/sim_doc Knowledge base Articles, incidents, and issues about this product. SymWISE support page Symantec Connect An online magazine that contains best practices, tips, tricks, and articles for users of this product. Symantec Connect page 15 16 Altiris™ Out of Band Management Component 7.1 from Symantec™ Release Notes Other information