GetClientPolicies.aspx requests time out in combination with Licensing errors.

Products

• IT Management Suite

Issue/Introduction

GetClientPolicies.aspx requests time out in combination with Licensing errors.

"Unhandled exception.

Request timed out.
   [System.Web.HttpException @ ]

Exception logged from:
   at Altiris.Web.NS.Agent.Global.Application_Error(Object, EventArgs)
   at System.Web.HttpApplication.RaiseOnError()
   at System.Web.HttpApplication+PipelineStepManager.ResumeSteps(Exception)
   at System.Web.HttpApplication.BeginProcessRequestNotification(System.Web.HttpContext, AsyncCallback)
   at System.Web.HttpRuntime.ProcessRequestNotificationPrivate(System.Web.Hosting.IIS7WorkerRequest, System.Web.HttpContext)
   at System.Web.Hosting.PipelineRuntime.ProcessRequestNotificationHelper(IntPtr, IntPtr, IntPtr, Int32)
   at System.Web.Hosting.PipelineRuntime.ProcessRequestNotification(IntPtr, IntPtr, IntPtr, Int32)

HTTP [POST]: https://SMPSERVER.domain.com/altiris/NS/Agent/GetClientPolicies.aspx
","Altiris.Web.NS.Agent.Global.Application_Error","Altiris.Web.NS.Agent.dll","139","Errors"

 

"Exception occurred while verifying a certificate in certificate store. Skipping...

Thread was being aborted.
   [System.Threading.ThreadAbortException @ System]
   at System.Security.Cryptography.CAPISafe.CertGetCertificateChain(IntPtr hChainEngine, SafeCertContextHandle pCertContext, FILETIME& pTime, SafeCertStoreHandle hAdditionalStore, CERT_CHAIN_PARA& pChainPara, UInt32 dwFlags, IntPtr pvReserved, SafeCertChainHandle& ppChainContext)
   at System.Security.Cryptography.X509Certificates.X509Chain.BuildChain(IntPtr hChainEngine, SafeCertContextHandle pCertContext, X509Certificate2Collection extraStore, OidCollection applicationPolicy, OidCollection certificatePolicy, X509RevocationMode revocationMode, X509RevocationFlag revocationFlag, DateTime verificationTime, TimeSpan timeout, SafeCertChainHandle& ppChainContext)
   at System.Security.Cryptography.X509Certificates.X509Chain.Build(X509Certificate2 certificate)
   at Altiris.NS.Licensing.LicenseUtil.Verify(X509Certificate2 certificate)
   at Altiris.NS.Licensing.LicenseUtil.GetInstalledLicenseInstancesFromCertStore()

Exception logged from:
   at Altiris.NS.Licensing.LicenseUtil.GetInstalledLicenseInstancesFromCertStore()
   at Altiris.NS.Licensing.LicenseUtil.GetInstalledLicenseInstances()
   at Altiris.NS.Licensing.LicenseInstance.get_InstalledLicenses()
   at Altiris.NS.Licensing.License..ctor(System.Guid)
   at Altiris.NS.Licensing.DefaultLicenseProvider.GetLicense(System.Guid)
   at Altiris.NS.Licensing.LicensingPolicy.EnsureLicense()
   at Altiris.NS.Licensing.LicensingPolicy.get_License()
   at Altiris.NS.Licensing.LicensingPolicy.get_Status()
   at Altiris.NS.Licensing.ClientConfig.AgentLicensingCheck.Get(System.Guid, System.Guid)
   at Altiris.NS.Licensing.ClientConfig.AgentLicensingCheck.Get(Altiris.NS.ItemManagement.IAccessCheckBag<System.Xml.XmlDocument>, System.Guid, System.Guid)
","Altiris.NS.Licensing.LicenseUtil.GetInstalledLicenseInstancesFromCertStore","Altiris.NS.dll","126","Errors"

 

Environment

Symantec Management Platform 8.x

Cause

Legacy license certificates fail to load in time.

Resolution

Start by getting the SLF license from the Symantec Licensing Portal or reseller to replace the legacy (TXT) license certificates.

On the Symantec Management Platform,

1. Remove the legacy (TXT) certificate licenses using the License removal tool.
License Removal tool: "C:\Program Files\Altiris\Notification Server\Bin\Tools\RemoveLicense.exe"
2. Run the "NS.Internal Licensing Refresh Item.{e8136a00-759c-4471-addc-b1d9e58cb5bd}" scheduled task.

3. Install the SLF license(s) via the Symantec Installation Manager.
4. Run the "NS.Internal Licensing Refresh Item.{e8136a00-759c-4471-addc-b1d9e58cb5bd}" scheduled task.
5. Restart the Altiris Service and run Admin CMD>IISRESET