Errors after applying version 4 of the SMP_SMA cumulative point fix

Products

• IT Management Suite

Issue/Introduction

Unable to get signature of response data.

 

The key 'NS.PackageSigning' does not exist.

   [Altiris.NS.Security.Cryptography.KeyNotFoundException @ Altiris.NS]

   at Altiris.NS.Security.Cryptography.SymmetricKeyManager.GetAsymmetricKey(String name)

   at Altiris.NS.Security.Cryptography.RSAKeyCache.GetKeyEntry(String keyName, Boolean isPrivate)

   at Altiris.NS.Security.Cryptography.RSAKeyCache.GetRSAPrivateKey(String keyName)

   at Altiris.NS.Security.Cryptography.DataSigning.GetSignatureForPackage(Byte[] dataToSign)

   at Altiris.NS.Utilities.NsResponseOps.GetContentSignature(Byte[] data)

 

Exception logged from:

   at Altiris.NS.Utilities.NsResponseOps.GetContentSignature(Byte[])

   at Altiris.NS.Utilities.NsResponseOps.HeaderInsertDataSignature(System.Web.HttpResponse, Byte[])

   at Altiris.NS.Utilities.NsResponseOps.SendSymantecResponse(System.Web.HttpContext, Int32, Byte[], Boolean, Boolean, String)

   at Altiris.NS.WebHandlers.AltirisHttpHandlerBase<T>.HandleResponse(System.Web.HttpContext, T)

   at Altiris.NS.WebHandlers.AltirisHttpHandlerBase<T>.ProcessRequest(System.Web.HttpContext)

   at System.Web.HttpApplication+CallHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()

   at System.Web.HttpApplication.ExecuteStepImpl(System.Web.HttpApplication+IExecutionStep)

   at System.Web.HttpApplication.ExecuteStep(System.Web.HttpApplication+IExecutionStep, Boolean&)

   at System.Web.HttpApplication+PipelineStepManager.ResumeSteps(Exception)

   at System.Web.HttpApplication.BeginProcessRequestNotification(System.Web.HttpContext, AsyncCallback)

   at System.Web.HttpRuntime.ProcessRequestNotificationPrivate(System.Web.Hosting.IIS7WorkerRequest, System.Web.HttpContext)

   at System.Web.Hosting.PipelineRuntime.ProcessRequestNotificationHelper(IntPtr, IntPtr, IntPtr, Int32)

   at System.Web.Hosting.PipelineRuntime.ProcessRequestNotification(IntPtr, IntPtr, IntPtr, Int32)

Environment

Release : 8.6

Cause

The point fix was installed while logged on as a user account rather than the Altiris Service Account (Application Identity). We found that the KMS keys were missing.

Resolution

We uninstalled the point fix and then reinstalled it while logged on as the Altiris Service Account. We then the restored the KMS keys using the Symantec Installation Manager from a recent backup per KB174996.

We verified that the keys were now present in C:\ProgramData\Symantec\SMP\KMS\ on the Notification Server.