The Symantec Management Agent fails to Register with the Notification Server

Products

• IT Management Suite

Issue/Introduction

The Symantec Management Agent (SMA) fails to register with the Notification Server.

The following error appears in the Symantec Management Agent log file.

 

Request 'HTTPS://<FQDN of Notification Server>/Altiris/NS/Agent/CreateResource.aspx' failed, COM error: A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider (0x800B0109)

 

The following error appears in the Symantec Management Agent install log file.

 

HttpOperations: Failed to send event to 'HTTPS://<FQDN of Notification Server>:443/Altiris/NS/Agent/PostEvent.asp', error: A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider (0x800B0109)

 

Environment

Windows Server 2012 R2

Cause

In the Symantec Management Console go to Settings>Notification Server>Certificate Management and check the "NS web site certificate". If there is a red X icon, the the certificate is not setup correctly.

Open IIS Manager and you will see that the correct certificate is NOT bound to the correct port on the Notification Server. 

Resolution

Bind the correct certificate to the correct port using IIS Manager and then restart IIS.