Unable to install Symantec Management Agent on a linux machine
Article ID: 282346
Updated On:
Products
Issue/Introduction
When trying to use wget the following message appears:
Unable to Establish SSL Connection
Environment
ITMS 8.6 +
Where IIS is using TLSv1.x
CLIENT OS:
- SUSE
- REDHAT
- UBUNTU
Cause
Most likely causes:
1) Client OS did does not support TLSv1.x
Here is how to verify on the client machine:
type: openssl ciphers -v | awk '{print $2}' | sort | uniq > tlsversion.txt
type: cat tlsversion.txt
Following output was displayed:
as you can see the endpoint openssl does not support tlsv1.x
This I what a fully support tlsv1.x openssl looks like:
2) Issue is with wget
Resolution
If the tlsversion.txt file only shows SSLv2 or SSL3, then openssl is out of date and the package needs to be updated
In this case, the endpoint was using SUSE 9 which is out-of-support from the OEM and openssl could not be updated. Also, according to the Client OS Support Matrix the client OS is no longer supported
If the OS supports TLSv1.x and you get the same error when running wget, the issue is with wget.
Try one of the following:
a) Make sure your time/date is right and update (refresh) the ssl certificates, as root, type: /usr/sbin/update-ca-certificates --fresh
then run the wget command again: wget https://<NS Server>/Altiris/NS/NSCap/Bin/Unix/AgentInstall/Linux/x64/aex-bootstrap-linux
b) If that "Unable to establish SSL connection." message is still showing, then try using the --no-check-certificate option as a workaround: wget --no-check-certificate https://<NS SERVER>/Altiris/NS/NSCap/Bin/Unix/AgentInstall/Linux/x64/aex-bootstrap-linux
c) Or you can try this: wget --secure-protocol=TLSv1 https://<NS SERVER>/Altiris/NS/NSCap/Bin/Unix/AgentInstall/Linux/x64/aex-bootstrap-linux
d) Alternatively, use sftp and transfer the aex-bootstrap-linux file on the endpoint. Can also transfer the XML file as well if the installer complains about it missing
Additional Information
Windows Putty for sftp: https:www.putty.org
Feedback
