Receiving multiple errors regarding "DAL Generator failed for"

book

Article ID: 162951

calendar_today

Updated On:

Products

Management Platform (Formerly known as Notification Server) Installation Manager (formerly AICM)

Issue/Introduction

During an upgrade, the following messages were noticed in the NS logs:

DAL errors started showing in logs for 
Altiris.NS.Replication.Hierarchy.Dal.dll and 
Altiris.NS.StandardItems.Dal.v4.2FF65FD64DC8089ED246FDDCD7A13815E0CD2FFE

 

DAL Generator failed.
Critical error: Failed to compile shadow assembly.
error CS1548: Cryptographic failure while signing assembly 'c:\ProgramData\Symantec\SMP\DAL\Altiris.NS.Replication.Hierarchy.Dal.v4.5E70CB8B861C85B022B38A46C5E83CCB09298821\Altiris.NS.Replication.Hierarchy.Dal.dll' -- 'Error signing assembly -- Unknown error (8013141c)'
...

-----------------------------------------------------------------------------------------------------
Date: 2/5/2016 9:45:06 AM, Tick Count: 176805390 (2.01:06:45.3900000), Size: 10.28 KB
Process: AeXSvc (11224), Thread ID: 4, Module: AeXSVC.exe
Priority: 1, Source: NsDataAccessLayer
 
 
 
DAL Generator failed for: Altiris.NS.Replication.Hierarchy.DataAccessLayer.HierarchyDataAccessLayer
Critical error: Failed to compile shadow assembly.
error CS1548: Cryptographic failure while signing assembly 'c:\ProgramData\Symantec\SMP\DAL\Altiris.NS.Replication.Hierarchy.Dal.v4.5E70CB8B861C85B022B38A46C5E83CCB09298821\Altiris.NS.Replication.Hierarchy.Dal.dll' -- 'Error signing assembly -- Unknown error (8013141c)'
...

-----------------------------------------------------------------------------------------------------
Date: 2/5/2016 9:45:06 AM, Tick Count: 176805406 (2.01:06:45.4060000), Size: 10.44 KB
Process: AeXSvc (11224), Thread ID: 4, Module: AeXSVC.exe
Priority: 1, Source: Altiris.Database.DataAccessLayer.DataAccessLayerGenerator.GetConcreteDataAccessLayer

 

DAL Generator failed.
Critical error: Failed to compile shadow assembly.
error CS1548: Cryptographic failure while signing assembly 'c:\ProgramData\Symantec\SMP\DAL\Altiris.NS.StandardItems.Dal.v4.2FF65FD64DC8089ED246FDDCD7A13815E0CD2FFE\Altiris.NS.StandardItems.Dal.dll' -- 'Error signing assembly -- Unknown error (8013141c)'
...

Date: 2/4/2016 8:59:13 PM, Tick Count: 130852515 (1.12:20:52.5150000), Size: 30.81 KB
Process: AeXSvc (5756), Thread ID: 37, Module: AeXSVC.exe
Priority: 1, Source: NsDataAccessLayer

 

On recent versions, you may see something like these:

Failed to configure: E:\Program Files\Altiris\Notification Server\Config\NS_Update.config

Critical error: Failed to compile shadow assembly.
error CS1548: Cryptographic failure while signing assembly 'c:\ProgramData\Symantec\SMP\DAL\Altiris.NS.StandardItems.Dal.v4.4A8824948D116B42ED54E95F9F927470F1C01E82\Altiris.NS.StandardItems.Dal.dll' -- 'Error signing assembly -- Unknown error (8013141c)'

 

Failed to install the product from the file: E:\Program Files\Altiris\Notification Server\Config\NS_Update.config

Critical error: Failed to compile shadow assembly.
error CS1548: Cryptographic failure while signing assembly 'c:\ProgramData\Symantec\SMP\DAL\Altiris.NS.StandardItems.Dal.v4.4A8824948D116B42ED54E95F9F927470F1C01E82\Altiris.NS.StandardItems.Dal.dll' -- 'Error signing assembly -- Unknown error (8013141c)'

 

Cause

Known issue

Resolution

This issue has been reported to the Symantec Development team. Fixes about this process have been added to ITMS 8.0.

​A pointfix is available for those that have installed ITMS 7.6 HF7. See attached "​Pointfix_eTrack3907988_SMP_7_6_HF7.zip"

See the attached ReadMe.pdf for instructions on this pointfix.


Note:

In some rare cases, even with the mentioned fix mentioned here, you may need to verify the following:

Give your user (In our case, the «user» should be NS «App Identity») Full Access to the following folder: C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys (or C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys in previous OS versions).

We found that in some occasions the permissions in the machine keys directory needed to have the service account (App Identity) added instead of just administrators group:

  1. Change security on directory:
    • C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys
  2. Add your App Identity account, with the following minimum "Advanced" set of permissions:
    • Create files / write data

    • Create folders / append data

    • Write attributes

    • Write extended attributes

    • Delete

  3. After hitting apply, accept that 5 directories were "Access is denied", if any.

Attachments

ReadMe.pdf get_app
Pointfix_eTrack3907988_SMP_7_6_HF7.zip get_app