Management Agent GUI displays: 'Software Update Plug-in is not ready'

book

Article ID: 154143

calendar_today

Updated On:

Products

Patch Management Solution for Windows

Issue/Introduction

Clients installed the Symantec Management (Altiris) Agent and the Software Update Plug-in. In the Altiris Agent the Software Update tab is blank with the following message: 'Software Update Plug-in is not ready'

Review client logs for possible download or communications errors.

Cause

  1. Licensing Nodes are exceeded.
     
  2. Software Update Plug-in Install and Upgrade Policies are not enabled.
     
  3. The Altiris Agent is deployed in an image, but the client is restricted from downloading plug-in packages from the Notification Server.
     
  4. A repair of Patch Management was run without logging on with Application Identity credentials, and this transferred the rights for control of Patch Default Filters to the logged on user.
     
  5. The Notification Server may be dealing with other processes and returns a 'busy' response to the client. Error in client log: Description: Server is busy: retrying POST event.
     
  6. The Altiris Agent deployment settings are configured to roll out the Agent with an admin account, rather than the Application Identity credentials.
     
  7. The NS.Weekly Scheduled Task and other scheduled tasks are configured to run with the Domain Admin Credentials.
     
  8. The cloned Default Software Update Plug-in Policy targeting the affected client was generated from another cloned policy.  Agent logs will show the following error: Failed to get SoftwareUpdateAgent from Symantec Management Agent.
  9. Corrupted Software Update Plug-in installation on the client.
     
  10. Corrupted Patch Management Solution files; bad resource associations for install packages.
     
  11. A Separate App Pool is implemented and configured with 'Requested Queue Limit' to run higher than 1000.
     
  12. The Patch Default Target/Filters fail to target appropriately, for they show 0 members, yet there are Windows Computers with the Software Update Plug-in Installed, or the ownership of these Filters/Targets is not the Application Identity (Symantec Service Account).
     
  13. Patch Install Tools Task fails to target clients.

 

Resolution

Work through the following to resolve each issue:

  1. Contact your Sales Representative: 1-800-721-3934 opt.#5; review further troubleshooting on KM: TECH170397 
     
  2. Enable the needed policies. Ensure the upgrade is enabled. Set these to run ASAP and on a repeating schedule to ensure the clients are able to get the plug-in.
     
  3. Check communications and ensure downloading is allowed for the client. In some instances the client's host file has been altered to prevent downloading.
     
  4. The ownership of Patch Default Filters needs to be updated to the Application Identity (App ID) in SQL. To confirm this is the issue:
    • Log onto the Notification Server with Application Identity Credentials
    • Drill down on the Console > Settings > All Settings > Software > Patch Management > Microsoft Settings. Check the targeted filter count. If that count displays 0 then this is a problem. 
      • The location for these policies is outlined on KM: HOWTO9835
      • If this is confirmed as the issue, please contact support to work through the process to update the App ID's ownership in SQL: 1-800-721-3934
         
  5. Run the Software Update Plug-in Install policy on a schedule that does not interfere with other Notification Server Processes.
     
  6. Disable the setting: 'Use the following admin account instead of Application Credential' on the Altiris Agent Installation Options. Set to run with App ID.
    • Drill down on the Console > Settings > All Settings > Agents/Plug-ins > Symantec Management Agent > Settings > Symantec Management Agent Install - Install Agent Tab in the right pane and select the 'Settings' button. 
        
  7. Configure the NS.Weekly Scheduled Task to run with user: NT AUTHORITY\SYSTEM  
     
  8. Recreate the Clone of the Default Software Update Plug-in Policy and configure Software Update Cycle / Reboot Notifications as needed. Ensure the new clone is created from the Default Software Update Plug-in Policy. Delete the old clone and ALL other clones that are no longer needed, for they can cause conflicts for targeted clients.  
     
  9. Download the Software Update Plug-in msi file from the NS, save the file to the client's Desktop; and run a repair on that msi: 
    • Remote to the client
    • Open the Altiris Agent GUI
      • Select the Software Delivery Tab
        • From the left-blue pane expand Options; enable the top 3 options
          • Show Scheduled tasks and packages
          • Show internal tasks and packages
          • Show expired packages
        • From the right paned name Policy
          • Double-click the Software Update Plug-in Install (or Upgrade) Policy
          • View the opened Popup: Package and task properties
            • Go to the Download History tab
            • Click the URL/UNC for the package under the 'Source location'
            • Save the package to the client's Desktop
    • Right-click on the Altiris Patch Management Agent Install msi file; run a repair on the Software Update Plug-in.  
       
  10. Run a repair of Patch Management (follow a KB for your version: 6.2: HOWTO6294; 7.0: HOWTO9725; 7.1: HOWTO47868).

  11. Configuration of a Separate App Pool for Patch Management is detailed on KM: TECH201682  (Not to be utilized in later versions due to IIS Software changes)

  12. Also confirm that App ID is the owner of all Patch Default Filters/Targets and they hold the proper count of clients to target

  13. Ensure the Patch Install Tools Task is targeting the clients (only works for 7.1 SP1-MP1.x)

 

 

 

Applies To

Patch Management 7.1, SP1, SP2, MP1.x & 7.5