Cumulative Pointfixes applicable to ITMS 8.0 HF6

Products

• Deployment Solution
• IT Management Suite

Issue/Introduction

This article contains cumulative point fixes provided to customers Post-8.0 HF6 for SMP, SMA, SMF, PATCH, SWM, ECV, TASK, ASSET, RTSM, ULM, INV, INVPACK, VMM, ND, RAC, WF, and DS issues.
Each section can be installed independently from the others when indicated. Apply any of the attached files that may apply to your issue.

Resolution

Latest SMA/SMF/SMP/TASK pointfix

See attached "SMP_SMF_SMA_TASK_8.0_POST_HF6_v7.zip"

SMA (Symantec Management Agent) fixes:

Peer to Peer downloads across wan when p2p port 56118 is not blocked	N/A
Jobs with conditions fail to run correctly if the user schedules them with the defer option enabled	N/A
Numerous cross-subnet downloads were detected after P2P installation	N/A
P2P will be used if there is no package server defined in a site
User targeted Managed Delivery Policies disappear from user's machines after about 2 days
Long-lasting hashing operations during service stopping cause SMA to terminate improperly

 

SMP (Symantec Management Platform) fixes:

Failed to process NSE while doing an AD Import. Invalid resource ref was looked up, corrupt XML document!	TECH236649
Command-line User Defined Right Click action fails with error "Error running command. Err=Invalid flags specified".	N/A
When editing a filter with computers, selected resources are not listed.	N/A
Uncontrolled ItemNSSource table growth	TECH229103
Missing CoreSettings.config. SMP services do not start	N/A
Old Security Group references remain after User AD Import in the Inv_Security_Groups data class	TECH240652
New Bulk Resource Export Rule should allow the export of resources without GUID
I.E 11 on Win 10 RS3 latest win updates, throws UAC pop-up each time when the user works with detection rules on SMP 8.0 HF6 + pf where UAC 3 Level enabled and Win latest updates installed	N/A
The maintenance window in UI shows the default schedule despite the change	TECH247251
Some items going to one child server are not replicating during differential replications. All other child servers work fine and most items work correctly on the one server	N/A

 

SMF (Software Management Framework) fixes:

See Attachment: SMF_Rollup_8.0HF6v3.zip

Path Traversal Vulnerability in Software Management Framework	N/A
Managed Delivery Policies (MDP in future) scheduled to run on Maintenance (MW in future) window and waiting for restart for some another MDP, are rescheduled to the next Maintenance window after restart instead of execution in this particular Maintenance window	N/A
SWD policy executes twice within the maintenance window	N/A
Quick, Package Delivery tasks and Managed Policies hang while running, detection and downloads continue
Path Traversal Vulnerability in Software Management Framework	SYM17-013
Managed Delivery Policy result shows Not Applicable if any part of the policy does not apply but others do	TECH248814

TASK (Task Management) fixes:

Error "Event XML is badly formed." When task status is sent up to SMP	N/A
Run-script tasks running simultaneously with common (input token) declaration"

 

Other Pointfixes

 

ASSET (Asset Management Solution) fixes:

The software license model in 8.0 prevents users with limited access to create Software Licenses for permitted Locations	TECH239882
General improvements and bug fixes for multiple Asset Management pages.
Duplicate scope collection created when creating resources under AppIdentity credentials	N/A

See attached "AMS_8.0_POST_HF6_v5.zip"

 

SWM (Software Management Solution) fixes:

 

ECV (Enhanced Console Views) fixes:

Code changes	N/A
Child server files are not always showing up on the Parent when picking files to Meter - Error in Profiler (possible timeout)	N/A
If several file resources have the same name and version they are shown as a single record in Add Program picker and not added as expected	N/A

See "ECV_8.0_POST_HF6_v3.zip"
 

PATCH (Patch Management Solution) fixes:

In case of seldom maintenance, the windows client does not send data that the status of the update is installed after pending reboot	N/A
Novell import: SLE-12-SP1-SAP-Updates channel not imported	N/A
SWU does not install due to the Patch Install Tools package not ready within a single cycle	N/A
Sometimes Patch downloads task stages file partially	TECH248141
Patch Traversal vulnerability fix	SYM17-013
The Status column in the report Policy Execution by Computer is returning Undefined in cases where there is data available
Patch Advertisements are being orphaned in an enabled state

See attached "PATCH_8_0_POST_HF6_v6.zip" (NOTE: Hierarchy fix for this issue provided in addition to this PF on TECH248422)

 

RTSM (Real-Time Systems Management) fixes:

 

MONITOR

See "Monitor_8.0_POST_HF6_v1.zip"
 

ULM (Unix, Linux, Mac Agent) fixes:

CVE-2016-9840 and CVE-2016-9842 in zlib 1.2.8	N/A
Mac Agent ignores the Warning Countdown Duration setting; only uses 5 minutes	N/A

Click here to download file

 

INV (Inventory Solution) fixes:

SVM18-025: CRITICAL Zero-Day Vulnerability in the Altiris Management Agent
Software components with Russian names not being associated with software products during NS.Nightly task	TECH237005
8.0 HF6 Rollup v2 - General improvements and bug fixes	N/A
PluginManager is crashed during inventory collection if InvTaskConfig contains a common data class that is not collected on the ULM client
Events for not available any more Inventory data are sent incorrectly resulting in displaying old non-zero information
The inventory for [SW Patch Windows] is an empty string, which will create an empty NSI
Symantec Level 1 workers can do things that they do not have permission to
Newer systems do not report the Model correctly for Hardware Inventory
A fatal error occurred in module 'AMAgent.dll (8.0.3338.0)' in 'AeXNSAgent.exe'	TECH250415

See attached "Inv_8.0_Post_HF6_v6.zip"

 

WF (Workflow Server) fixes:

See "WF_8.0_POST_HF6.zip"
 

VMM (Virtual Machine Management) fixes:

See "VMM_8.0_POST_HF6_v1.zip"
 

RAC (Remote Access Connector) fixes:

See "RAC_8.0_POST_HF6.zip"

 

SUITE PORTALS fixes:

See "SUITE_PORTALS_8.0_POST_HF6.zip"
 

DS (Deployment Solution) fixes:
DS 8.0 POST_HF6v6: Click here to download file

Installation Instructions

Predefined machine not picking up to boot into PXE Boot	TECH240515
Predefined Computers added through ASDK are not available as fast as manually added predefined resources	N/A
Drivermanager stops because of a bad download, We should continue the rest not stop	N/A
Error: Operating System API %0 failed. [RegistryOperations::UnLoadHive] RegUnLoadKeyW( target_system )	N/A
When running DA in automation the Error is displayed: Error: Registry key %1 not found on system. target_software\\Microsoft\\Windows NT\\CurrentVersionRegisteredOwner	N/A
DA fails out on a specific storage driver	N/A
Importing Predefined computers using ASDK with Name and Serial number causing all computers imported to use the same GUID	N/A
Ghost crashes with 'Invalid URL failed to open the image file' when deploying UEFI image modified by Ghost Explorer	N/A
Ghost fails to run -chkimg when uppercase driver letter is specified	N/A
Ghost 12 is not burning valid image files to DVD for some hardware	N/A
Ghost crashes when trying to restore an image that was captured to DVD	N/A
Ghost not properly restoring Span images from DVD	N/A
When restoring an image from @CDR an error is seen 'This disk was not created by Symantec Ghost'	N/A
Running a command without the User and password and @ symbol, fails with -dcrypt	N/A
Dscrypt file is deleted before Ghost being executed	N/A
Importing Predefined computers using ASDK with Name and Serial number causing all computers imported to use the same GUID	N/A
Uninstall of DSPS should remove all entries added to web.config file by the DSPS install	N/A
/NoRestart /Quiet needs to be added to the pkgmgr.exe command line to properly install certs	N/A
WinPE10 1607 & 1703 initial  support	N/A
Security Update	N/A
Extract SSL Certificate (x64) -Install Fails when Altiris Agent is on a different drive than the notification server	N/A
Prepare for Image Capture task ignores decryption errors and attempts to complete	N/A
PC Transplant Personality Distribute does not work in 3.1, 7.6 HF7, or 8.0.	N/A
SSL setting for the 'Altiris' application in IIS has to be set to ‘ignore’ on the NS for the SBS server service to get the menu options	N/A
The client machine fail to download the SSL certificate from the Site server in WINPE	N/A
PC Transplant Personality Distribute does not work in 3.1, 7.6 HF7, or 8.0	N/A
Uninstall of DSPS should remove all entries added to web.config file by the DSPS install	N/A
Extract SSL Certificate (x64) -Install Fails when Altiris Agent is on a different drive than the notification server	N/A
/NoRestart /Quiet needs to be added to the pkgmgr.exe command line to properly install certs	N/A
Automation environment fails to download PS Cert if it's already a task server	N/A
Security Update	N/A
WinPE10 1607 & 1703 limited support	N/A
Prepare for Image Capture task ignores decryption errors and attempts to complete	N/A
The client machine fail to download the SSL certificate from the Site server in WINPE	N/A
With Accept SSL setting ON, Ghost creates image falls back on unc code from HTTPS	N/A
PXE does not work in a TLS 1.2 environment	N/A
DS automation environment does not work in a TLS 1.2 environment	N/A
Custom unattend.xml file associated with a 'Deploy image' task doesn't get replicated from Parent SMP to Child SMP	N/A
Unable to import SOI packages by ResourceImportTool after installation of DS POST_HF6v2	N/A
Custom unattend.xml file associated with a 'Install Windows OS' task doesn't get replicated from Parent SMP to Child SMP	N/A
Prepare for image capture task needs to determine if the system is 1511 or 1607, 1703 for proper sysprep operation	N/A
Prepare for Image capture task fails when run on Windows 10 with UAC is turned on	N/A
After running SOI task for Windows 10 Red stone 2/3, the Client hangs on the Regional Settings page.	N/A
Import of WinPE 10 1709 (RS3) needs to be enabled.	N/A
Pxe Preboot configurations that are deleted from the console do not get deleted from the site servers.	N/A
Path Traversal Vulnerability in Deployment Solution	SYM17-013
Altiris.Deployment.OSFlavors throw exceptions that are preventing users from using Scripted OS Install tasks
Import of WinPE 10 1803 (RS4) needs to be enabled
Partition Disk task is not working properly giving an error when running chkdsk with WinPE10
The automation folder does not work in the non-English locale