search cancel

During a repair, it failed to configure CoreSolution.config: Failed to detect certificate purpose

book

Article ID: 174282

calendar_today

Updated On:

Products

IT Management Suite

Issue/Introduction

The customer is trying to run a full repair of ITMS 8.1 RU7 after his 8.1 RU7 upgrade failed.

When the configuration ran, it failed with these type of entries:

Entry 1:

Failed to configure: G:\Program Files\Altiris\Notification Server\Config\CoreSolution.config

The specified GUID does not refer to a registered item type: 87d903e4-a733-4008-99d5-48b312521d8a
   [Altiris.NS.Exceptions.AeXException @ Altiris.NS]

 

Entry 2:

Error during Upgrade, status: Error, ex: Symantec.Installation.UpgradeConfigTaskException: Product failed to install. See log for details.

 

Entry 3:

Failed to detect certificate purpose.

Digital Certificate somehow doesn't have Inv_Digital_Certificate_Association data class assigned.
   [System.InvalidOperationException @ Altiris.Resource]

Entry 1:

Failed to configure: G:\Program Files\Altiris\Notification Server\Config\CoreSolution.config

The specified GUID does not refer to a registered item type: 87d903e4-a733-4008-99d5-48b312521d8a
   [Altiris.NS.Exceptions.AeXException @ Altiris.NS]
   at Altiris.NS.ItemManagement.Item.CreateInstance(Guid itemClassGuid, Object[] parameters, Guid itemGuid)
   at Altiris.NS.StandardItems.CertificateConfiguration.NSCertificateConfigurationItem.InitializeCertificateConfiguration()
   at Altiris.NS.StandardItems.Product.CoreSolutionHelper.CreateSystemCertificateResources()
   at Altiris.NS.StandardItems.Product.CoreSolutionInstallation.OnInstallProduct(XmlNode installationNode)
   at Altiris.NS.StandardItems.Product.ProductInstallation.InstallProduct()
   at Altiris.NS.StandardItems.Product.CoreSolutionInstallation.InstallProduct()
   at Altiris.NS.Installation.ProductConfigurationWorker.ConfigureProductInternal(String configFile, Boolean ownsProgressContext, SerializationMode serializationMode)
   at Altiris.NS.Installation.ProductConfigurationWorker.ConfigureProductBatchInternal()

Exception logged from:
   at Altiris.NS.Installation.ProductConfigurationWorker.ConfigureProductBatchInternal()
   at Altiris.NS.Installation.ProductConfigurationWorker.ConfigureProductBatch()
   at System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, Object, Boolean)
   at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, Object, Boolean)
   at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, Object)
   at System.Threading.ThreadHelper.ThreadStart()

-----------------------------------------------------------------------------------------------------
Date: 4/3/2019 1:24:44 PM, Tick Count: 70287935 (19:31:27.9350000), Size: 2.05 KB
Process: AeXSvc (1900), Thread ID: 4, Module: Altiris.NS.dll
Priority: 1, Source: Altiris.NS.Installation.ProductConfigurationWorker.ConfigureProductBatchInternal
 

Entry 2:

Error during Upgrade, status: Error, ex: Symantec.Installation.UpgradeConfigTaskException: Product failed to install. See log for details.
-----------------------------------------------------------------------------------------------------
Date: 4/3/2019 1:24:46 PM, Tick Count: 70290041 (19:31:30.0410000), Size: 448 B
Process: SymantecInstallationManager (7476), Thread ID: 10, Module: SymantecInstallationManager.exe
Priority: 1, Source: Symantec.Installation.UpgradeConfigTask+<>c.<StartImpl>b__2_0
 

Entry 3:

Failed to detect certificate purpose.

Digital Certificate somehow doesn't have Inv_Digital_Certificate_Association data class assigned.
   [System.InvalidOperationException @ Altiris.Resource]
   at Altiris.Resource.StandardResources.DigitalCertificate.SetTableColumn(String tableName, String columnName, Object value)
   at Altiris.Resource.StandardResources.DigitalCertificate.Initialize()
   at Altiris.Resource.StandardResources.DigitalCertificate.DetectCertificatePurposes(X509Certificate2 certificate, Boolean ignorePrivateKeyForChecks)

Exception logged from:
   at Altiris.Resource.StandardResources.DigitalCertificate.DetectCertificatePurposes(System.Security.Cryptography.X509Certificates.X509Certificate2, Boolean)
   at Altiris.Resource.StandardResources.DigitalCertificate.ReInitialize(System.Guid)
   at Altiris.NS.StandardItems.Product.CoreSolutionHelper.CreateSystemCertificateResources()
   at Altiris.NS.StandardItems.Product.CoreSolutionInstallation.OnInstallProduct(System.Xml.XmlNode)
   at Altiris.NS.StandardItems.Product.ProductInstallation.InstallProduct()
   at Altiris.NS.StandardItems.Product.CoreSolutionInstallation.InstallProduct()
   at Altiris.NS.AeXConfig.ConfigureInstallation(String, Boolean)
   at Altiris.NS.AeXConfig.ConfigureInstallation()
   at Altiris.NS.AeXConfig.Perform(System.Collections.Generic.IList<String>)
   at Altiris.NS.AeXConfig.Main(String[])

-----------------------------------------------------------------------------------------------------
Date: 4/4/2019 8:51:56 AM, Tick Count: 59736854 (16:35:36.8540000), Size: 1.75 KB
Process: AeXConfig (8580), Thread ID: 1, Module: Altiris.Resource.dll
Priority: 1, Source: Altiris.Resource.StandardResources.DigitalCertificate.DetectCertificatePurposes
 

Cause

Because of where the upgrade failed, the proper config file for SMP 8.1 RU7 was not  executed.

While looking at this "87d903e4-a733-4008-99d5-48b312521d8a" GUID, we found references of it under "NS_Hotfix_staticStrings.config"
<string context="Altiris.NS.StandardItems.CertificateConfiguration.NSCertificateConfigurationItem" typeGuid="87d903e4-a733-4008-99d5-48b312521d8a" stringRef="cert-070baad2-68f1-484d-95c3-b9f00c78bd65" culture="" string="NS root certificate" />

However, it is just strings. This class should be registered by "RU_Cons_classes.config". There is this item class registration.

Environment

ITMS 8.1 RU7

Resolution

Run from the command prompt as administrator the following command (from the ...\program files\altiris\notification server\bin directory):

aexconfig.exe /configure "<specifiy drive>\program files\altiris\notification server\config\NS_Hotfix.config"