CUMULATIVE POST ITMS 8.6 RU3 POINT FIXES

Products

• IT Management Suite
• Client Management Suite
• Server Management Suite

Issue/Introduction

This cumulative point fix contains fixes for SMP (Symantec Management Platform) and other Solutions for issues provided to customers with ITMS 8.6 RU3 until next ITMS version is released/installed.

Environment

ITMS 8.6 RU3

Resolution

SMP/SMA (Symantec Management Platform/Symantec Management Agent) Fixes:

AeXNSCHTTPs.exe can't be installed in silent mode and always shows extracting packages
Date/Time is incorrect in drill-down report in case if English United Kingdom language is set
High Memory Usage on SMP 8.6 RU3 caused by calling SQL procedure "spGetObsoleteInventoryConsistencyRecords"
DS returns wrong managed resource instead of predefined machine
DS deployment via CEM. Orphaning certificate. When CEM client boots to Preboot, a new CEM certificate gets generated every time, and the existing ones get marked as orphaned. When the client boots back to Production, it re-uses the existing CEM certificates, but doesn't remove orphaned mark from them.
When P2P is enabled use of Private Bytes and Handles experience growth
NSE performance processing decreased after upgrade to 8.6 RU3
CalendarScheduledItemOccurence in 8.6 RU3 no longer contains information about patch policies
Clients cannot download software package using P2P if task Update Client configuration was executed on clients before
Issues adding IP Addresses to a Filter while using a CSV file
Asset resource fails to create or edit when Prompt is checked on an attribute within  associated editable dataclass that has a - in the name	257398
Report permission - prevent user to check/uncheck auto-run
Package Server Downloading Packages to system32 directory	259436
Differential Replication takes 2 days - with 90+ retries on  spGetReplicationVerificationHashes with String or binary data would be truncated. An exception occurred during replication
AexSVC is utilizing high memory
Atrshost service high memory consumption
SiteTransfer register operations do not commit transactions
SiteTransfer requests from clients without policy enabling this functionality
Failed validation of certificate by request errors appears in the log	263363
The Client Task Server restarting every hour
Client Task Agent can't register using persistent connection with Remote Task Server
The original target empty after editing the cloned target
Inventory Solution Licenses Not Being Released
Fail to send test email after configuring the SMTP settings Note about this fix: After PF installation, you must add (in the SMP Console, under Settings>Notification Server>Core Settings>Active Settings) a new coresetting AllowedOutgoingTls and set value 3072 After new coresetting adding, you need to restart W3WP service and Altiris Service as well. Note: Introduced AllowedOutgoingTls core setting that can be used to specify allowed TLS values. By default - 0, what means that default settings will be used. Values (mask, so setting value 16368 means "all"): 48 (0x00000030) - SSL 3 192 (0x000000C0) - TLS 1.0 768 (0x00000300) - TLS 1.1 3072 (0x00000C00) - TLS 1.2 (TLS 1.3 is not supported in 8.6 RU3)	275506

Download file: "SMA_SMP_8_6_POST_RU3_v13_30Oct2023.zip"
Install instructions are included in the Readme.pdf inside this attachment.

 

TS (Task Server) Fixes:

Atrshost service high memory consumption Note:  This point fix only needs to be installed on remote Task Server(s) to address the Atrshost service high memory consumption issue if persistent connections are being used.  If persistent connections are being used, both SMA_SMP_8_6_POST_RU3_v13_30Oct2023.zip (see above) and TS_8_6_POST_RU3_v2_08Jun.zip need to be applied to fully address the issue.  If persistent connections are not being used, only SMA_SMP_8_6_POST_RU3_v13_30Oct2023.zip needs to be installed.
The Client Task Server restarting every hour
Client Task Agent can't register using persistent connection with Remote Task Server

Download file: "TS_8_6_POST_RU3_v2_08Jun.zip"
Install instructions:
The pointfix available in TS_8_6_POST_RU3_v2_08Jun.zip is for remote Task Servers and it must be installed on all remote task servers manually by running pfinstaller2.exe

 

ECV (Enhanced Console Views) Fixes:

ITMS Filters can be overwritten changing the Filter Definition Note: Both " SMA_SMP_8_6_POST_RU3_v13 " and "ECV_8_6_RU3_PF_v2" point fixes must be installed. Otherwise if some of these point fixes aren't installed, then fix will not work.	N/A
Unable to see some Icons after Installing Point Fix for Non-Administrator Roles

Download file: "ECV_8_6_RU3_PF_v2_06Nov2023.zip"
Install instructions are included in the Readme.pdf inside this attachment.

Inv (Inventory Solution) / Application Metering Fixes

Menu bar items missing from Application Metering Policies	249858

Download file: "INV_8_6_POST_RU3_v1.zip"
Install instructions are included in the Readme.pdf inside this attachment.

 

Patch (Patch Management Solution) Fixes

Red Hat Channel Import Failing	252281
SWUAgent- Segmentation fault 11 during assessment on Centos 7.9"	N/A
Packages disappear from Child Package Servers	N/A
In Hierarchy, previous Chrome policy/packages gets broken after new Chrome policy is enabled	N/A
Red Hat import fails because of inability to download channel metadata files	N/A

Download file: "Patch_8_6_POST_RU3_v5_18Oct2023.zip"
Install instructions are included in the Readme.pdf inside this attachment.

VMM (Virtual Machine Management) Fixes:
ND (Network Discovery) Fixes:

Changes required for ESXi 7+ support (except DS) to 8.6 RUx	N/A

Download file: "ND_8_6_POST_RU3_v1.zip"
Install instructions are included in the Readme.pdf inside this attachment.

 

ASSET (Asset Management Solution) Fixes

Asset 8.6 RU3 - asset license recalculation task fails

Download file: "Asset_8_6_POST_RU3_v1.zip"

 

WF (Workflow Solution) Fixes

WF Active Directory Sync Not updating group association in processmanager	N/A

Download file: "Workflow_8_6_POST_RU3_v1.zip"

ULM (Unix/Linux/Mac Management Agent) Fixes:

Adding support for MacOS 13 (Ventura) to 8.6 RU3	macOS 13 (Ventura) Support Statement
Mac Computers do not receive the new Gateway certificate thumbprint	267602
Linux - Basic Inventory Not Sending - being held in /opt/altiris/notification/nsagent/var/queue
Adding macOS 14 (Sonoma) support to 8.6 RU3

Download file: "ULM_8_6_POST_RU3_v3_06Nov23.zip"
Install instructions are included in the Readme.pdf inside this attachment.

DS (Deployment Solution) Fixes:

DS returns wrong managed resource instead of predefined machine. Note that to address this case, fixes were done both in DS and SMP sides, hence both pointfix files need to be installed to resolve it. This DS fix has a dependency on the SMP 8.6 Post-RU3 Pointfix attached to this KB article.

Download file: "DS_8_6_POST_RU3_v1_06Oct.zip"
Install instructions are included in the Readme.pdf inside this attachment.

 

Additional DS (Deployment Solution) and GSS (Ghost Solution Suite) files:
Note:
It is not pointfix but a new version available that you may want to consider for an updated 64-bit ipxe.efi (ipxe v1.21.1+) binaries signed by Microsoft:
"updated 64-bit ipxe.efi (ipxe v1.21.1+) binaries" (KB 280113)

Additional Information

198337 "CUMULATIVE POST ITMS 8.5 RU4 POINT FIXES"
215121 "CUMULATIVE POST ITMS 8.6 POINT FIXES"
221269 "CUMULATIVE POST ITMS 8.6 RU1 POINT FIXES"
235538 "CUMULATIVE POST ITMS 8.6 RU2 POINT FIXES"
261271 "CUMULATIVE POST ITMS 8.7 GA POINT FIXES"