You may notice warnings in the agent logs when attempting to establish a Task Server connection with the SMP Server (in this case, the SMP Server also has the Task Service enabled and is acting as a Task Server):
Log entry from a client machine:
Tickle: Connection error occurred: CAtrsException exception, error: Error reading data from socket. You may see this exception if atrshost service was restarted or if connection from Client to Task Server tickle port: '50124' is lost by some reasons, OS error: An existing connection was forcibly closed by the remote host (10054), at line 596 re-throw at CTaskServerDirectConnection::_OnReceiveReady-----------------------------------------------------------------------------------------------------Date: 3/26/2024 12:30:37 PM, Tick Count: 97115109 (1.02:58:35.1090000), Size: 650 BProcess: AeXNSAgent.exe (1260), Thread ID: 16464, Module: client task agent.dllPriority: 2, Source: Client Task Agent
And in the NS logs, we can see these entries when the warning above is occurring:
(socket) failed to finish processing tickle connection: '10.0.0.156:47289' (#29126747)Failed to decrypt data[471] from client ('10.0.0.156:47289' (#29126747)): xxxxxxB9082C59E6B272997149BFBB7AE5824954C5A98BCB2C0B9978CBBE5DC14E11EE71D3780282FCF6EC0E8BF79C8D4B4CFED66FA0D16ED912040183F7A56E7E60F9A843D8A039CE5890F6A1964E561B6C5B72xxxxxxxxxxxxxxxxxxxxxxxxxxx407824A580992CBE9xxxxxxx[System.Exception @ Altiris.ClientTask.Server]at Altiris.ClientTask.Server.RemoteClientTaskManager.GetResourceGuidFromEncryptedClientData(Byte[] clientData, Socket clientSocket)at Altiris.ClientTask.Server.RemoteClientTaskManager.FinishProcessingClientConnection(Byte[] clientData, Socket clientSocket)
DecryptData failure. Error 2148073477[System.Runtime.InteropServices.COMException @ Altiris.TaskManagement.Common]at Symantec.NSAgent.AgentStorage.DecryptData(Byte[] encryptedData, UInt32 flags)at Altiris.TaskManagement.Common.ClientTask.Communication.NsIdentityContext.EnsureExecutedAsLocalSystemIdentity[TResult](Func`1 fn, ThrottledLogAction`2 logAction)at Altiris.ClientTask.Server.RemoteClientTaskManager.GetResourceGuidFromEncryptedClientData(Byte[] clientData, Socket clientSocket)
COM Exception errcode: 0x80090005
Exception logged from:at Altiris.DotNetLib.Logging.AtrsLog.ExceptionMessage(String message, Exception exception)at Altiris.ClientTask.Server.RemoteClientTaskManager.OnSocketException(Int32 level, String message, Nullable`1 epGuid, Socket sock, Exception ex)at Altiris.ClientTask.Server.RemoteClientTaskManager.OnSocketException(String message, Nullable`1 epGuid, Socket sock, Exception ex)at Altiris.ClientTask.Server.RemoteClientTaskManager.FinishProcessingClientConnection(Byte[] clientData, Socket clientSocket)at Altiris.ClientTask.Server.RemoteClientTaskManager.OnReceivePendingConnectionData(Socket sock, SocketWatchEvent eventType, Boolean& bReEnableRead)at Altiris.DotNetLib.Sockets.SocketWatchThread.ServePendingRead(WatchLoopData data, SocketWatchEntry poll)at System.Threading.Tasks.Parallel.<>c_DisplayClass17_0`1.<ForWorker>b_1()
....
-----------------------------------------------------------------------------------------------------Date: 3/26/2024 12:32:16 PM, Tick Count: 97214281 (1.03:00:14.2810000), Size: 5.21 KBProcess: AtrsHost (8028), Thread ID: 126, Module: Altiris.ClientTask.Server.dllPriority: 1, Source: RemoteClientTaskManager
(socket) failed to process incoming tickle connection: #29126747Failed to decrypt data[471] from client ('10.0.5.156:47289' (#29126747)): xxxxxxB9082C59E6B272997149BFBB7AE5824954C5A98BCB2C0B9978CBBE5DC14E11EE71D3780282FCF6EC0E8BF79C8D4B4CFED66FA0D16ED912040183F7A56E7E60F9A843D8A039CE5890F6A1964E561B6C5B72xxxxxxxxxxxxxxxxxxxxxx407824A580992CBE9xxxxxxx[System.Exception @ Altiris.ClientTask.Server]at Altiris.ClientTask.Server.RemoteClientTaskManager.GetResourceGuidFromEncryptedClientData(Byte[] clientData, Socket clientSocket)at Altiris.ClientTask.Server.RemoteClientTaskManager.FinishProcessingClientConnection(Byte[] clientData, Socket clientSocket)at Altiris.ClientTask.Server.RemoteClientTaskManager.OnReceivePendingConnectionData(Socket sock, SocketWatchEvent eventType, Boolean& bReEnableRead)
DecryptData failure. Error 2148073477[System.Runtime.InteropServices.COMException @ Altiris.TaskManagement.Common]at Symantec.NSAgent.AgentStorage.DecryptData(Byte[] encryptedData, UInt32 flags)at Altiris.TaskManagement.Common.ClientTask.Communication.NsIdentityContext.EnsureExecutedAsLocalSystemIdentity[TResult](Func`1 fn, ThrottledLogAction`2 logAction)at Altiris.ClientTask.Server.RemoteClientTaskManager.GetResourceGuidFromEncryptedClientData(Byte[] clientData, Socket clientSocket)
COM Exception errcode: 0x80090005
Exception logged from:at Altiris.DotNetLib.Logging.AtrsLog.ExceptionMessage(String message, Exception exception)at Altiris.ClientTask.Server.RemoteClientTaskManager.OnSocketException(Int32 level, String message, Nullable`1 epGuid, Socket sock, Exception ex)at Altiris.ClientTask.Server.RemoteClientTaskManager.OnSocketException(String message, Nullable`1 epGuid, Socket sock, Exception ex)at Altiris.ClientTask.Server.RemoteClientTaskManager.OnReceivePendingConnectionData(Socket sock, SocketWatchEvent eventType, Boolean& bReEnableRead)at Altiris.DotNetLib.Sockets.SocketWatchThread.ServePendingRead(WatchLoopData data, SocketWatchEntry poll)at System.Threading.Tasks.Parallel.<>c_DisplayClass17_0`1.<ForWorker>b_1()
....
-----------------------------------------------------------------------------------------------------Date: 3/26/2024 12:32:16 PM, Tick Count: 97214281 (1.03:00:14.2810000), Size: 5.21 KBProcess: AtrsHost (8028), Thread ID: 126, Module: Altiris.ClientTask.Server.dllPriority: 1, Source: RemoteClientTaskManager
ITMS 8.7
This issue was caused by having a duplicate communication profile for the SMP Server under the "Site Server Communication Servers" page. Due to this, the SMP Server was unable to process the tickle connections between the client machines and itself.
This tickle error definitely has something to do with these:
Data mismatch in the database can easily cause the decryption problems because the agent and the server try using encryption keys belonging to the different computer resources.
Remove the duplicate communication profile for your SMP Server. Please refer to the following KB for the steps to follow:
SMP Server has a duplicated communication profile after migrating to a new server