search cancel

Unable to install ULM Agent. Failed to load certificate from settings.

book

Article ID: 162842

calendar_today

Updated On:

Products

Notification Server Agent for Unix/Linux (Altiris)

Issue/Introduction

Installing of ULM Agent on may fail when using push (from Symantec Management Console) and pull methods.

Observed on RHEL 5.x, 6.x

In Symantec Management Console after unsuccessful installation (push) following detailed log will be shown:

Unable to use key file "" (unable to open file)
Using username "root".
Last login: Fri Jan 15 07:04:51 2016 from SERVERNAME.DOMAIN
]0;[email protected]:~[[email protected] ~]# stty kill ^U
]0;[email protected]:~[[email protected] ~]# stty cols 253
]0;[email protected]:~[[email protected] ~]# stty rows 25
]0;[email protected]:~[[email protected] ~]# export LC_ALL="C"
]0;[email protected]:~[[email protected] ~]# export LANG="C"
]0;[email protected]:~[[email protected] ~]# echo ACTIVE SHELL IS $SHELL END
ACTIVE SHELL IS /bin/bash END
]0;[email protected]:~[[email protected] ~]# id; echo ERROR=$?
uid=0(root) gid=0(root) groups=0(root),1(bin),2(daemon),3(sys),4(adm),6(disk),10(wheel) context=root:system_r:unconfined_t:SystemLow-SystemHigh
ERROR=0
]0;[email protected]:~[[email protected] ~]#
]0;[email protected]:~[[email protected] ~]# uname -s; echo ERROR=$?
Linux
ERROR=0
]0;[email protected]:~[[email protected] ~]# uname -p; echo ERROR=$?
x86_64
ERROR=0
]0;[email protected]:~[[email protected] ~]# cat /etc/redhat-release; echo ERROR=$?
Red Hat Enterprise Linux Server release 5.8 (Tikanga)
ERROR=0
]0;[email protected]:~[[email protected] ~]# cat /etc/SuSE-release; echo ERROR=$?
cat: /etc/SuSE-release: No such file or directory
ERROR=1
]0;[email protected]:~[[email protected] ~]# ps -ef | grep -v grep | grep aex-bootstrap-linux; echo ERROR=$?
ERROR=1
]0;[email protected]:~[[email protected] ~]# ps -ef | grep -v grep | grep AltirisAgentInstaller.bin; echo ERROR=$?
ERROR=1
]0;[email protected]:~[[email protected] ~]# rpm -q aex-nsclt; echo ERROR=$?
package aex-nsclt is not installed
ERROR=1
]0;[email protected]:~[[email protected] ~]# rpm -qi aex-nsclt; echo ERROR=$?
package aex-nsclt is not installed
ERROR=1
]0;[email protected]:~[[email protected] ~]# mkdir -p /opt/altiris/notification/nsagent; echo ERROR=$?
ERROR=0
]0;[email protected]:~[[email protected] ~]# cd /opt/altiris/notification/nsagent; echo ERROR=$?
ERROR=0
]0;[email protected]:/opt/altiris/notification/nsagent[[email protected] nsagent]# umask 077; echo ERROR=$?
ERROR=0
]0;[email protected]:/opt/altiris/notification/nsagent[[email protected] nsagent]# rm -f aex-bootstrap-linux; echo ERROR=$?
ERROR=0
]0;[email protected]:/opt/altiris/notification/nsagent[[email protected] nsagent]#
["Uploading file using 'scp' source=C:\Program Files\Altiris\Notification Server\NSCap\Bin\Unix\AgentInstall\Linux\x64\aex-bootstrap-linux target=/opt/altiris/notification/nsagent/aex-bootstrap-linux"]
find /opt/altiris/notification/nsagent/ -name aex-bootstrap-linux; echo ERROR=$?
/opt/altiris/notification/nsagent/aex-bootstrap-linux
ERROR=0
]0;[email protected]:/opt/altiris/notification/nsagent[[email protected] nsagent]# chmod 755 aex-bootstrap-linux; echo ERROR=$?
ERROR=0
]0;[email protected]:/opt/altiris/notification/nsagent[[email protected] nsagent]# rm -f .aex-agent-install-config.xml; echo ERROR=$?
ERROR=0
]0;[email protected]:/opt/altiris/notification/nsagent[[email protected] nsagent]# stty -echo; dd bs=1 count=1238 of=/opt/altiris/notification/nsagent/.aex-agent-install-config.xml
1238+0 records in
1238+0 records out
1238 bytes (1.2 kB) copied, 1.49604 seconds, 0.8 kB/s
]0;[email protected]:/opt/altiris/notification/nsagent[[email protected] nsagent]# ]0;[email protected]:/opt/altiris/notification/nsagent[[email protected] nsagent]# Performing SHA 256 sum integrity check and checking connectivity with NS.
./aex-bootstrap-linux -- -checkpackage -selfcheck aex-bootstrap-linux 2a8a179683d2abdd3c4d8bac3ce7b704fa02377d7022cc8946ac339bdee8bd3e; echo ERROR=$?
Verifying archive integrity... All good.
Uncompressing Symantec Management Agent Installer 7.6.1655
.....
INFO: SHA 256 integrity check succeeded.
INFO: Getting Package: http:// SERVERNAME.DOMAIN /Altiris/NS/NSCap/Bin/Unix/Agent/Linux/x64/package-manifest.xml into temp dir: /opt/altiris/notification/nsagent/.tmp_inst
INFO: Success getting Package.
ERROR=0
]0;[email protected]:/opt/altiris/notification/nsagent[[email protected] nsagent]# test -f /opt/altiris/notification/nsagent/srv_date && rm -f /opt/altiris/notification/nsagent/srv_date || :; echo ERROR=$?
ERROR=0
]0;[email protected]:/opt/altiris/notification/nsagent[[email protected] nsagent]# echo '2016-01-15 14:16:00' > /opt/altiris/notification/nsagent/srv_date; echo ERROR=$?
ERROR=0
]0;[email protected]:/opt/altiris/notification/nsagent[[email protected] nsagent]# touch /opt/altiris/notification/nsagent/.push_install_finished; echo ERROR=$?
ERROR=0
]0;[email protected]:/opt/altiris/notification/nsagent[[email protected] nsagent]# rm -f aex-nsclt-install.log; echo ERROR=$?
ERROR=0
]0;[email protected]:/opt/altiris/notification/nsagent[[email protected] nsagent]# ./aex-bootstrap-linux -- -D >>aex-nsclt-install.log 2>&1; echo ERROR=$?
ERROR=0
]0;[email protected]:/opt/altiris/notification/nsagent[[email protected] nsagent]#

 

When using pull method on Redhat machine, following errors will occur:

 

[[email protected] opt]# ./aex-bootstrap-linux http://SERVERNAME.DOMAIN
Verifying archive integrity... All good.
Uncompressing Symantec Management Agent Installer 7.6.1655
.....
INFO: Creating Default Config file.
INFO: Getting Package: http://SERVERNAME.DOMAIN/Altiris/NS/NSCap/Bin/Unix/Agent/Linux/x86 into temp dir: /opt/altiris/notification/nsagent/.tmp_inst
INFO: Success verifying package signatures.
INFO: Success getting Package.
INFO: Installing package...
======================================================================================
Fri Jan 15 07:28:22 MST 2016
Performing installation of Symantec Management Agent for UNIX, Linux and Mac 7.6.1655
======================================================================================
Installing Symantec Management Agent for UNIX, Linux and Mac 7.6 on the system.
Starting Agent configuration...
Symantec Management Agent for UNIX, Linux and Mac Configuration utility.
Creating/customizing Agent's configuration file.
Creating directory: /opt/altiris/notification/nsagent/var/queue  Result: OK
Creating directory: /opt/altiris/notification/nsagent/var/tasks  Result: OK
Creating directory: /opt/altiris/notification/nsagent/var/packages  Result: OK
Creating directory: /opt/altiris/notification/nsagent/var/swd  Result: OK
Creating customized RC and environment scripts.
Setting up RC scripts to start Agent at system start.
Creating wrappers scripts and setup links in the bin directories.
Generating secure storage key.
Registering standard plug-ins.
Generating IPC access keys.
Failed to load certificate from settings.
ERROR: Agent configuration failed.
Error: Agent configuration cannot be completed.
error: %post(aex-nsclt-7.6-1655.i386) scriptlet failed, exit status 1
ERROR: Failed to install package. Agent install failed.
ERROR: At least one input parameter for event sending is invalid: Action: 'Remote Install Finished', Client ID: ''.

 

Cause

This issue is caused by missing HTTPS binding in IIS.

Resolution

To solve this problem a HTTPS binding has to be enabled in IIS.

Open IIS Manager and under Connections expand "Sites" and select "Default Web Site". Under Action > Edit Site click on "Bindings..." and add HTTPS binding.