You were trying to upgrade your SMP Server to a newer version. While you were getting ready for it, you tried to make a backup of your NS Configuration using SIM (Symantec Installation Manager) but it failed.
Backup content:
NS Web configuration.
NS KMS encryption keys.
NS registry.
NS core settings.
NS CA configuration
-----------------------------------------------------------------------------------------------------
Date: 1/17/2023 12:43:38 PM, Tick Count: 317694906 (3.16:14:54.9060000), Size: 432 B
Process: SymantecInstallationManager (8332), Thread ID: 1, Module: SymantecInstallationManager.exe
Priority: 4, Source: Symantec.Installation.ViewModel.SummaryViewModel+<Next>d__56.MoveNext
You may be getting the following messages in the logs:
Entry 1:
Backing up... 1 of 1 components: Backing up Notification Server core configuration settings
-----------------------------------------------------------------------------------------------------
Date: 1/17/2023 12:44:00 PM, Tick Count: 317717140 (3.16:15:17.1400000), Size: 380 B
Process: SymantecInstallationManager (8332), Thread ID: 21, Module: SymantecInstallationManager.exe
Priority: 4, Source: Symantec.Installation.Automation.Output.ReportInfo
Entry 2:
Backing up... 1 of 1 components: Backing up Notification Server CA configuration
-----------------------------------------------------------------------------------------------------
Date: 1/17/2023 12:44:01 PM, Tick Count: 317718156 (3.16:15:18.1560000), Size: 369 B
Process: SymantecInstallationManager (8332), Thread ID: 21, Module: SymantecInstallationManager.exe
Priority: 4, Source: Symantec.Installation.Automation.Output.ReportInfo
Entry 3:
Failed to backup NS Agent CA configuration.
Unable to set security context, account missing: 00000000-0000-0000-0000-000000000000
[Altiris.NS.Exceptions.Security.MissingSecurityEntityException @ Altiris.NS]
at Altiris.NS.Security.SecurityContext.HandleContextException(Object identity, Exception ex, Boolean failWhenAccountMissing)
at Altiris.NS.Security.SecurityContext..ctor(Guid accountGuid, Boolean failWhenAccountMissing)
at Altiris.Resource.ResourceData.InitialiseData()
at Altiris.Resource.ResourceData.EnsureInitialized[T](T& value)
at Altiris.Resource.StandardResources.DigitalCertificate.GetSingleDataTableRow(String tableName)
at Altiris.Resource.StandardResources.DigitalCertificate.GetStringProperty(String tableName, String columnName, Func`1 certPropertyGetter)
at Altiris.Resource.StandardResources.DigitalCertificate.get_IsSelfSigned()
at Altiris.Resource.StandardResources.DigitalCertificateChain.Build()
at Altiris.Resource.StandardResources.DigitalCertificateChainBuilder.BuildChain(String thumbprint, Boolean bIncludePrivateKey)
at Altiris.NS.StandardItems.Backup.Core.CoreBackupRestoreProvider.GetCaCertificateChain(String name)
at Altiris.NS.StandardItems.Backup.Core.CoreBackupRestoreProvider.GetCAConfig()
Exception logged from:
at Altiris.NS.StandardItems.Backup.Core.CoreBackupRestoreProvider.GetCAConfig()
at Altiris.NS.StandardItems.Backup.Core.CoreBackupRestoreProvider.BackupCAConfig(System.Xml.XmlTextWriter, Altiris.NS.StandardItems.Backup.Common.ProviderContent&)
at Altiris.NS.StandardItems.Backup.Core.CoreBackupRestoreProvider.PerformBackup(Altiris.NS.StandardItems.Backup.Common.RepositoryInformation, System.Xml.XmlTextWriter, System.Collections.Generic.List<Altiris.NS.StandardItems.Backup.Common.ProviderContent>, System.Collections.Generic.List`1[Altiris.NS.StandardItems.Backup.Common.ProviderContent]&)
at Altiris.NS.StandardItems.Backup.NSBackupRestoreManager.PerformBackup(System.Guid, System.Collections.Generic.List<System.Guid>, System.Collections.Generic.List<System.Guid>, System.Collections.Generic.List`1[Altiris.NS.StandardItems.Backup.Common.HandledOperationFailure]&, Boolean)
at Altiris.NS.StandardItems.Backup.BackupScheduleItem.PerformBackup()
at Altiris.NS.StandardItems.Backup.BackupScheduleItem.ExecuteTask(System.Collections.Hashtable, Altiris.NS.ItemTaskManagement.ItemTaskState)
at Altiris.NS.TaskManagement.CoreTaskServiceThreadBase<T,TStartArgs>.ExecuteThreadProc(Object)
at System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, Object, Boolean)
at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, Object, Boolean)
at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, Object)
at System.Threading.ThreadHelper.ThreadStart(Object)
-----------------------------------------------------------------------------------------------------
Date: 1/17/2023 12:44:02 PM, Tick Count: 317719343 (3.16:15:19.3430000), Size: 3.26 KB
Process: AeXSvc (5480), Thread ID: 227, Module: Altiris.NS.StandardItems.dll
Priority: 1, Source: Altiris.NS.StandardItems.Backup.Core.CoreBackupRestoreProvider.GetCAConfig
Entry 4:
Failed to backup CA configuration.
Failed to load CA certificates.
[System.InvalidOperationException @ Altiris.NS.StandardItems]
at Altiris.NS.StandardItems.Backup.Core.CoreBackupRestoreProvider.BackupCAConfig(XmlTextWriter dataSection, ProviderContent& content)
Exception logged from:
at Altiris.NS.StandardItems.Backup.Core.CoreBackupRestoreProvider.BackupCAConfig(System.Xml.XmlTextWriter, Altiris.NS.StandardItems.Backup.Common.ProviderContent&)
at Altiris.NS.StandardItems.Backup.Core.CoreBackupRestoreProvider.PerformBackup(Altiris.NS.StandardItems.Backup.Common.RepositoryInformation, System.Xml.XmlTextWriter, System.Collections.Generic.List<Altiris.NS.StandardItems.Backup.Common.ProviderContent>, System.Collections.Generic.List`1[Altiris.NS.StandardItems.Backup.Common.ProviderContent]&)
at Altiris.NS.StandardItems.Backup.NSBackupRestoreManager.PerformBackup(System.Guid, System.Collections.Generic.List<System.Guid>, System.Collections.Generic.List<System.Guid>, System.Collections.Generic.List`1[Altiris.NS.StandardItems.Backup.Common.HandledOperationFailure]&, Boolean)
at Altiris.NS.StandardItems.Backup.BackupScheduleItem.PerformBackup()
at Altiris.NS.StandardItems.Backup.BackupScheduleItem.ExecuteTask(System.Collections.Hashtable, Altiris.NS.ItemTaskManagement.ItemTaskState)
at Altiris.NS.TaskManagement.CoreTaskServiceThreadBase<T,TStartArgs>.ExecuteThreadProc(Object)
at System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, Object, Boolean)
at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, Object, Boolean)
at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, Object)
at System.Threading.ThreadHelper.ThreadStart(Object)
-----------------------------------------------------------------------------------------------------
Date: 1/17/2023 12:44:02 PM, Tick Count: 317719375 (3.16:15:19.3750000), Size: 2.20 KB
Process: AeXSvc (5480), Thread ID: 227, Module: Altiris.NS.StandardItems.dll
Priority: 1, Source: Altiris.NS.StandardItems.Backup.Core.CoreBackupRestoreProvider.BackupCAConfig
While looking at the Certificate Management page (Settings>All Settings>Notification Server) and you may see this error as well:
Entry 1:
Failed to process web request.
Exception of type 'System.Web.HttpUnhandledException' was thrown.
[System.Web.HttpUnhandledException @ System.Web]
at System.Web.UI.Page.HandleError(Exception e)
at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)
at System.Web.UI.Page.ProcessRequest(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)
at System.Web.UI.Page.ProcessRequest()
at System.Web.UI.Page.ProcessRequest(HttpContext context)
at Altiris.NS.UI.Controls.PageCachePage.ProcessRequest(HttpContext context)
at Altiris.NS.UI.AltirisPage.ProcessRequest(HttpContext context)
Unable to set security context, account missing: 00000000-0000-0000-0000-000000000000
[Altiris.NS.Exceptions.Security.MissingSecurityEntityException @ Altiris.NS]
at Altiris.NS.Security.SecurityContext.HandleContextException(Object identity, Exception ex, Boolean failWhenAccountMissing)
at Altiris.NS.Security.SecurityContext..ctor(Guid accountGuid, Boolean failWhenAccountMissing)
at Altiris.Resource.ResourceData.InitialiseData()
at Altiris.Resource.ResourceData.EnsureInitialized[T](T& value)
at Altiris.Resource.StandardResources.DigitalCertificate.GetSingleDataTableRow(String tableName)
at Altiris.Resource.StandardResources.DigitalCertificate.get_CertificateData()
at Altiris.Resource.StandardResources.DigitalCertificate.EnsureInitialized()
at Altiris.Resource.StandardResources.DigitalCertificate.get_HasPrivateKey()
at Altiris.NS.StandardItems.CertificateConfiguration.NSCertificateConfigurationItem.EnsureResourceCreated(X509Certificate2 cert, Guid assocId, String scope)
at Altiris.NS.StandardItems.CertificateConfiguration.NSCertificateConfigurationItem.GetNSWebCertificateGuid()
at Altiris.NS.StandardItems.CertificateConfiguration.CertificateConfigurationManager.NSCertificateItemLoader.LoadAndRegisterItems()
at Altiris.NS.StandardItems.CertificateConfiguration.CertificateConfigurationManager.InitializeCertificateCache(Type type, Boolean invalidate, Boolean withReschedule)
at Altiris.NS.StandardItems.CertificateConfiguration.CertificateConfigurationManager.ForEachCachedItem[T](Type type, T arg, Func`3 action, Boolean withReschedule, Boolean preload)
at Altiris.NS.StandardItems.CertificateConfiguration.CertificateConfigurationManager.ForEachCachedCertificate[T](Type type, T arg, Func`3 action, Boolean withReschedule, Boolean preload)
at Altiris.NS.StandardItems.CertificateConfiguration.CertificateConfigurationManager.ForEachCachedCertificate(CertificateConsumer eConsumer, Func`3 loader, Boolean preload)
at Altiris.NS.StandardItems.CertificateConfiguration.CertificateConfigurationManager.FetchCertificates(CertificateConsumer eConsumer, Func`3 loader, Boolean preload)
at Altiris.NS.UI.Admin.Configuration.CertificateManagementPage.BuildDataSource(CertificateConsumer eConsumer, CertificateStatus filter)
at Altiris.NS.UI.Admin.Configuration.CertificateManagementPage.PageData.get_Table()
at Altiris.WebControls.GridControl.GetDataSource()
at Altiris.WebControls.GridControl.GetSanitizedFilter()
at Altiris.WebControls.GridControl.DoGridDataBind()
at Altiris.WebControls.GridControl.OnNeedRebind(Object sender, EventArgs oArgs)
at ComponentArt.Web.UI.Grid.OnNeedRebind(EventArgs e)
at ComponentArt.Web.UI.Grid.ComponentArtPreRender(EventArgs oArgs)
at ComponentArt.Web.UI.WebControl.OnPreRender(EventArgs e)
at System.Web.UI.Control.PreRenderRecursiveInternal()
at System.Web.UI.Control.PreRenderRecursiveInternal()
at System.Web.UI.Control.PreRenderRecursiveInternal()
at System.Web.UI.Control.PreRenderRecursiveInternal()
at System.Web.UI.Control.PreRenderRecursiveInternal()
at System.Web.UI.Control.PreRenderRecursiveInternal()
at System.Web.UI.Control.PreRenderRecursiveInternal()
at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)
Exception logged from:
at Altiris.NS.UI.AltirisPage.ProcessRequest(System.Web.HttpContext)
at System.Web.HttpApplication+CallHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()
at System.Web.HttpApplication.ExecuteStepImpl(System.Web.HttpApplication+IExecutionStep)
at System.Web.HttpApplication.ExecuteStep(System.Web.HttpApplication+IExecutionStep, Boolean&)
at System.Web.HttpApplication+PipelineStepManager.ResumeSteps(Exception)
at System.Web.HttpApplication.BeginProcessRequestNotification(System.Web.HttpContext, AsyncCallback)
at System.Web.HttpRuntime.ProcessRequestNotificationPrivate(System.Web.Hosting.IIS7WorkerRequest, System.Web.HttpContext)
at System.Web.Hosting.PipelineRuntime.ProcessRequestNotificationHelper(IntPtr, IntPtr, IntPtr, Int32)
at System.Web.Hosting.PipelineRuntime.ProcessRequestNotification(IntPtr, IntPtr, IntPtr, Int32)
at System.Web.Hosting.UnsafeIISMethods.MgdIndicateCompletion(IntPtr, System.Web.RequestNotificationStatus&)
at System.Web.Hosting.UnsafeIISMethods.MgdIndicateCompletion(IntPtr, System.Web.RequestNotificationStatus&)
at System.Web.Hosting.PipelineRuntime.ProcessRequestNotificationHelper(IntPtr, IntPtr, IntPtr, Int32)
at System.Web.Hosting.PipelineRuntime.ProcessRequestNotification(IntPtr, IntPtr, IntPtr, Int32)
HTTP [POST]: https://YourSMPserver/Altiris/NS/Admin/Configuration/CertificateManagementPage.aspx?Url=https://smp85/Altiris/Console/tree.aspx?ViewGuid=a57fb0e9-0676-4e00-929a-6bb37dc1f888&&ConsoleGuid=1b22db4e-a898-443f-9b99-855b1653d3f5&TreeGuid=a57fb0e9-0676-4e00-929a-6bb37dc1f888&ParentGuid=00000000-0000-0000-0000-000000000000&ItemGuid=bff56118-7fb8-418b-b4b4-1a46f22c9d7c&ViewGuid=a57fb0e9-0676-4e00-929a-6bb37dc1f888&ConsoleGuid=1b22db4e-a898-443f-9b99-855b1653d3f5&Cart_grdCertUsage_CAGrid_Callback=yes
ip: [192.168.1.26]; languages: [en-US,en]; content-length: [374];
timings: [[D] 00:00:00.3255901(R: 00:00:00.3245914, W: 00:00:00.0009987)];
response: [200 OK]; x-smp-nsversion: [8.6.3268.0];
-----------------------------------------------------------------------------------------------------
Date: 1/20/2023 2:02:35 PM, Tick Count: 69571203 (19:19:31.2030000), Size: 6.33 KB
Process: w3wp (7580), Thread ID: 47, Module: Altiris.NS.UI.dll
Priority: 1, Source: Altiris.NS.UI.AltirisPage.ProcessRequest
Entry 2:
HTTP Request failed:
/Altiris/NS/Admin/Configuration/CertificateManagementPage.aspx?Url=https%3a%2f%2fYourSMPserver%2fAltiris%2fConsole%2ftree.aspx%3fViewGuid%3da57fb0e9-0676-4e00-929a-6bb37dc1f888%26%26ConsoleGuid%3d1b22db4e-a898-443f-9b99-855b1653d3f5&TreeGuid=a57fb0e9-0676-4e00-929a-6bb37dc1f888&ParentGuid=00000000-0000-0000-0000-000000000000&ItemGuid=bff56118-7fb8-418b-b4b4-1a46f22c9d7c&ViewGuid=a57fb0e9-0676-4e00-929a-6bb37dc1f888&ConsoleGuid=1b22db4e-a898-443f-9b99-855b1653d3f5&Cart_grdCertUsage_CAGrid_Callback=yes
Unable to set security context, account missing: 00000000-0000-0000-0000-000000000000
[Altiris.NS.Exceptions.Security.MissingSecurityEntityException @ Altiris.NS]
at Altiris.NS.Security.SecurityContext.HandleContextException(Object identity, Exception ex, Boolean failWhenAccountMissing)
at Altiris.NS.Security.SecurityContext..ctor(Guid accountGuid, Boolean failWhenAccountMissing)
at Altiris.Resource.ResourceData.InitialiseData()
at Altiris.Resource.ResourceData.EnsureInitialized[T](T& value)
at Altiris.Resource.StandardResources.DigitalCertificate.GetSingleDataTableRow(String tableName)
at Altiris.Resource.StandardResources.DigitalCertificate.get_CertificateData()
at Altiris.Resource.StandardResources.DigitalCertificate.EnsureInitialized()
at Altiris.Resource.StandardResources.DigitalCertificate.get_HasPrivateKey()
at Altiris.NS.StandardItems.CertificateConfiguration.NSCertificateConfigurationItem.EnsureResourceCreated(X509Certificate2 cert, Guid assocId, String scope)
at Altiris.NS.StandardItems.CertificateConfiguration.NSCertificateConfigurationItem.GetNSWebCertificateGuid()
at Altiris.NS.StandardItems.CertificateConfiguration.CertificateConfigurationManager.NSCertificateItemLoader.LoadAndRegisterItems()
at Altiris.NS.StandardItems.CertificateConfiguration.CertificateConfigurationManager.InitializeCertificateCache(Type type, Boolean invalidate, Boolean withReschedule)
at Altiris.NS.StandardItems.CertificateConfiguration.CertificateConfigurationManager.ForEachCachedItem[T](Type type, T arg, Func`3 action, Boolean withReschedule, Boolean preload)
at Altiris.NS.StandardItems.CertificateConfiguration.CertificateConfigurationManager.ForEachCachedCertificate[T](Type type, T arg, Func`3 action, Boolean withReschedule, Boolean preload)
at Altiris.NS.StandardItems.CertificateConfiguration.CertificateConfigurationManager.ForEachCachedCertificate(CertificateConsumer eConsumer, Func`3 loader, Boolean preload)
at Altiris.NS.StandardItems.CertificateConfiguration.CertificateConfigurationManager.FetchCertificates(CertificateConsumer eConsumer, Func`3 loader, Boolean preload)
at Altiris.NS.UI.Admin.Configuration.CertificateManagementPage.BuildDataSource(CertificateConsumer eConsumer, CertificateStatus filter)
at Altiris.NS.UI.Admin.Configuration.CertificateManagementPage.PageData.get_Table()
at Altiris.WebControls.GridControl.GetDataSource()
at Altiris.WebControls.GridControl.GetSanitizedFilter()
at Altiris.WebControls.GridControl.DoGridDataBind()
at Altiris.WebControls.GridControl.OnNeedRebind(Object sender, EventArgs oArgs)
at ComponentArt.Web.UI.Grid.OnNeedRebind(EventArgs e)
at ComponentArt.Web.UI.Grid.ComponentArtPreRender(EventArgs oArgs)
at ComponentArt.Web.UI.WebControl.OnPreRender(EventArgs e)
at System.Web.UI.Control.PreRenderRecursiveInternal()
at System.Web.UI.Control.PreRenderRecursiveInternal()
at System.Web.UI.Control.PreRenderRecursiveInternal()
at System.Web.UI.Control.PreRenderRecursiveInternal()
at System.Web.UI.Control.PreRenderRecursiveInternal()
at System.Web.UI.Control.PreRenderRecursiveInternal()
at System.Web.UI.Control.PreRenderRecursiveInternal()
at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)
Exception logged from:
at Altiris.NS.UI.AltirisWebApplication.ReportApplicationError(System.Web.HttpContext)
at Altiris.NS.UI.AltirisWebApplication.Application_Error(Object, EventArgs)
at System.Web.HttpApplication.RaiseOnError()
at System.Web.HttpApplication.RecordError(Exception)
at System.Web.HttpApplication+PipelineStepManager.ResumeSteps(Exception)
at System.Web.HttpApplication.BeginProcessRequestNotification(System.Web.HttpContext, AsyncCallback)
at System.Web.HttpRuntime.ProcessRequestNotificationPrivate(System.Web.Hosting.IIS7WorkerRequest, System.Web.HttpContext)
at System.Web.Hosting.PipelineRuntime.ProcessRequestNotificationHelper(IntPtr, IntPtr, IntPtr, Int32)
at System.Web.Hosting.PipelineRuntime.ProcessRequestNotification(IntPtr, IntPtr, IntPtr, Int32)
at System.Web.Hosting.UnsafeIISMethods.MgdIndicateCompletion(IntPtr, System.Web.RequestNotificationStatus&)
at System.Web.Hosting.UnsafeIISMethods.MgdIndicateCompletion(IntPtr, System.Web.RequestNotificationStatus&)
at System.Web.Hosting.PipelineRuntime.ProcessRequestNotificationHelper(IntPtr, IntPtr, IntPtr, Int32)
at System.Web.Hosting.PipelineRuntime.ProcessRequestNotification(IntPtr, IntPtr, IntPtr, Int32)
HTTP [POST]: https://YourSMPserver/Altiris/NS/Admin/Configuration/CertificateManagementPage.aspx?Url=https://YourSMPserver/Altiris/Console/tree.aspx?ViewGuid=a57fb0e9-0676-4e00-929a-6bb37dc1f888&&ConsoleGuid=1b22db4e-a898-443f-9b99-855b1653d3f5&TreeGuid=a57fb0e9-0676-4e00-929a-6bb37dc1f888&ParentGuid=00000000-0000-0000-0000-000000000000&ItemGuid=bff56118-7fb8-418b-b4b4-1a46f22c9d7c&ViewGuid=a57fb0e9-0676-4e00-929a-6bb37dc1f888&ConsoleGuid=1b22db4e-a898-443f-9b99-855b1653d3f5&Cart_grdCertUsage_CAGrid_Callback=yes
ip: [192.168.1.26]; languages: [en-US,en]; content-length: [374];
timings: [[D] 00:00:00.3255901(R: 00:00:00.3245914, W: 00:00:00.0009987)];
response: [200 OK]; x-smp-nsversion: [8.6.3268.0];
-----------------------------------------------------------------------------------------------------
Date: 1/20/2023 2:02:35 PM, Tick Count: 69571203 (19:19:31.2030000), Size: 6.03 KB
Process: w3wp (7580), Thread ID: 47, Module: w3wp.exe
Priority: 1, Source: WebApplication
ITMS 8.x
For some reason, probably a faulty previous repair or database corruption, it was missing the following (based on an 8.6 RU3 database):
AppIdentityGuid
DsGatewayCert
DsNsCert
DsPackage
SmaProxyCert
entries under the "ServerSettingGuids" table. The only ones available were:
NSResourceGuid
OwnerNSGuid
1. Run:
select * from ServerSettingGuids
and check if these values are present and populated:
NSResourceGuid
OwnerNSGuid
AppIdentityGuid
DsGatewayCert
DsNsCert
DsPackage
SmaProxyCert
2. If not, run a Full Repair on your current implementation:
3. If the Full Repair doesn't solve the issue, try to create a new database. Make sure you have a copy of your KMS keys: Backing up and restoring Notification Server KMS encryption keys
With a new database, see if that finishes without a problem. Then, check the "ServerSettingGuids" table and see if those missing entries are there. If so, then try to reattach the previous database and see if that generates the missing entries when the reconfiguration occurs.