Altiris™ Real-Time System Manager 7.0 from Symantec Release Notes

Article:DOC1634  |  Created: 2008-06-25  |  Updated: 2009-03-05  |  Article URL http://www.symantec.com/docs/DOC1634
Article Type
Documentation



Description



Question
What do I need to know about the 7.0 release of Altiris™ Real-Time System Manager?

Answer

Altiris™ Real-Time System Manager 7.0 from Symantec

Release Notes

Build number 7.0.1299

Introduction

Where to get more information

Features in this Release

Known Issues in this Release

Introduction

Altiris™ Real-Time System Manager software (formerly called Web Administrator for Windows Solution) reduces the need of desk-side visits for common hardware and OS related problems. Real-Time System Manager lets administrators, helpdesk technicians, and remote workers manage remote computers using Intel® Active Management Technology (Intel® AMT), Alert Standard Format (ASF), Desktop and mobile Architecture for System Hardware (DASH), and Windows Management Instrumentation (WMI) technologies through a Web browser. It provides detailed real-time information about the health and status of a remote computer, and allows those with appropriate permissions to perform administrative tasks, such as running an application, rebooting the computer, resetting a password, running a trace route, performing a port check, and several other useful features.

Real-Time System Manager is part of the following suites:

  • Altiris™ Client Management Suite from Symantec
    For release notes, see Knowledge Base article 40929.
  • Altiris™ Server Management Suite from Symantec
    For release notes, see Knowledge Base article 45893.

Update: Localized documentation for this product is now available for French, German, Italian, Portuguese, Russian, Spanish, Japanese, and Simplified Chinese.

To install localized documentation, open the Symantec Installation Manager, click Check for Updates and select the language documentation package that you want to install.

To view localized documentation, do one of the following:

  • Set your browser to a supported language, open the Symantec Management Console, and from the Help menu click Context or Documentation Library.
  • Go to C:\Program Files\Altiris\Documentation\Web\language\product

Where to get more information

The product installation includes the following documentation:

Document Description Location

User's Guide

Information about how to use this product, including detailed technical information and instructions for performing common tasks.

This information is available in PDF format.

Help

Information about how to use this product. This information is the same as in the User's Guide.

Help is available at the solution level and at the suite level.

This information is available in HTML help format.

The Documentation Library, which is available in the Symantec Management Console on the Help menu.

Context-sensitive help is available for most screens in the Symantec Management Console.

You can open context-sensitive help in the following ways:

  • The F1 key
  • The Context command, which is available in the Symantec Management Console on the Help menu.

For more information, you can use the following resources:

Resource Description Location

Symantec Management Platform Release Notes

Information about new features and important issues in the Symantec Management Platform.

This information is available as an article in the Knowledge Base.

https://kb.altiris.com/article.asp?article=45141&p=1

You can also search for the product name under Release Notes.

Installing the Symantec Management Platform products

Information about using Symantec Installation Manager to install the Symantec Management Platform products.

This information is available as an article in the Knowledge Base.

https://kb.altiris.com/article.asp?article=45732&p=1

Altiris 7 Planning and Implementation Guide

Information about capacity recommendations, design models, scenarios, test results, and optimization best practices to consider when planning or customizing an Altiris 7 Infrastructure for your organization.

This information is available as an article in the Knowledge Base.

https://kb.altiris.com/article.asp?article=45803&p=1

Knowledge Base

Articles, incidents, and issues about this product.

http://kb.altiris.com/

Symantec Connect (formerly Altiris Juice)

An online magazine that contains best practices, tips, tricks, and articles for users of this product.

http://www.symantec.com/connect/endpoint-management-virtualization

Online Forums

Forums for users of this product.

http://forums.altiris.com/

Features in this Release

The following are features of this release:

Support for DASH technology

Real-Time System Manager supports computers with Broadcom DASH out-of-band management technology.

Connection credentials management done by Pluggable Protocol Architecture

The Pluggable Protocol Architecture software is a component of Notification Server. This software lets you configure connection credentials and connection profiles for different technologies (WMI, SNMP, Intel AMT, and so on) to use with Altiris solutions, including Real-Time System Manager. Real-Time Console Infrastructure is no longer used to configure connection credentials.

Real-Time System Manager Known Issues in this Release

The following are unresolved issues in this release. For additional information regarding an issue, click the Article ID link.

Known Issue Article ID
Wait until Credential Manager installs on the Notification Server computer

If you have just installed Notification Server on a clean computer, you cannot use Real-Time System Manager until the Credential Manager agent/plug-in installs on the Notification Server computer. To speed up the agent/plug-in installation process, open the Altiris Agent UI, and then send basic inventory and update configuration manually.

 
Connecting to client computers with Windows XP Service Pack 2

You receive an "Access denied" or "The network path was not found" error message when you try to connect to a computer that is running Windows XP Service Pack 2. This issue occurs because the default configuration of the Windows Firewall program in Windows XP SP2 blocks incoming network traffic on Transmission Control Protocol (TCP) port 445. For the administrative tools listed here to connect to a remote computer, that remote computer must permit incoming network traffic on TCP port 445.

For possible resolution methods, see the "Troubleshooting" chapter in the Real-Time System Manager User's Guide.

 
Connecting to Windows XP client computers in a workgroup 

Even if valid credentials are provided and Windows Firewall is configured correctly (remote WMI execution is enabled) on a Windows XP client computer that is a member of a workgroup, you may still be unable to connect to the client computer using the Real-Time view. This is a Windows XP limitation caused by the "ForceGuest" option enabled by default on all Windows XP computers being members of a workgroup (in contrast to domain members). All users logging onto such computers over the network are forced to use the Guest account. To work around this problem, set the "ForceGuest" DWORD value to equal 0 (zero) under the [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa] key in the Windows registry on the client computer.

For more information, see Microsoft KB articles http://support.microsoft.com/default.aspx?scid=KB;EN-US;180548 and http://support.microsoft.com/default.aspx?scid=kb;en-us;290403.

Also, see the "Troubleshooting" chapter in the Real-Time System Manager User's Guide.

 
Connecting to Windows Vista client computers

When using Real-Time System Manager to remotely connect to Windows Vista client computers, you must make sure that Windows Firewall is configured to allow remote Windows Management Instrumentation (WMI) connections on the client computer (Network and Sharing Center > Windows Firewall > Change Settings > Exceptions > Programs and ports > Windows Management Instrumentation (WMI) > set the check box to enable Exception for the WMI service). Additionally, for standalone Vista clients (not in a domain), you must disable the User Account Control (UAC) through the Windows Control Panel (User Accounts > Turn User account control on or off > clear the Use User Account Control (UAC) to help protect your Computer check box). Optionally, you can disable the UAC for the built-in Administrator account (if you want to use this account for remote connection) through the Administrative Tools > Local Security Policy MMC snap-in (Local Policies > Security Options > disable the User Account Control: Admin Approval mode for Built-in Administrator Account policy).

For more information, see the "Troubleshooting" chapter in the Real-Time System Manager User's Guide.

 
Altiris Agent tasks on quarantined computers

If a computer is outside of the domain that the Notification Server computer is in, and if the "Filter Network Traffic" System Defense option is activated, you cannot perform Altiris tasks (such as inventory and software delivery) on that managed computer. Tasks will work if the client computer and the Notification Server computer are in the same domain.

 
Closing the Real-Time view does not close the connection

If you close the Internet Explorer window without disconnecting, the session (on this computer) will stay open for approximately 15 minutes. This lets any user access the last viewed client computer without specifying any credentials (by opening the Real-Time view on the same computer you were working on).

 
Issues when connecting to computers that have multiple network cards

Real-Time System Manager connection to client computers, which have more than one NIC (Network Interface Card), has been improved. The following limitations still apply:

  • The Real-Time System Manager connection timeout is 10 minutes.
  • The Altiris Agent must have the Configuration Management Database (CMDB) updated with the new IP address after the client computer connects to the network.
 
Restart the computer after partial unconfiguration

We recommend that you restart the target computer after you perform partial unconfiguration or the following issues can occur:

  • The "Full Unconfiguration" command does not work.
  • Incorrect hardware information is displayed in the Real-Time view.
 
One-to-many tasks cannot manage resources by an IP address

To manage a computer from the Real-Time view one-to-one, you can enter an IP address and connect to the computer. One-to-many tasks do not work in this way. To run one-to-many tasks, the target computer's FQDN must be resolvable correctly from the Notification Server computer.

 
Network Filtering page shows default number of ping packets

In the Real-Time view, on the Network Filtering page, the solution's default value is shown in the number of ping packets box. This is not the value that is currently set on the target computer.

 
Powering off Intel ASF from S3 state

Some Intel ASF hardware does not support power off from the S3 state. You can try to power on the computer and then run the power off command again. Broadcom ASF does not have this problem.

 
PXE Boot does not work with some ASF hardware

When, in the Real-Time view, you select the reboot command and choose to boot from PXE, some ASF hardware fails to boot from PXE. This is a hardware limitation. HP with Broadcom ASF, DELL Precision T3400, and a few other computers are known to have this problem.

You can try to power down the computer and then power on and boot from PXE.

 
Managed Service Provider configurations are not supported

Both one-to-one and one-to-many tasks in the Real-Time System Manager software require a direct connection to the target computer that you want to manage. It is not possible to manage computers located behind NAT-enabled routers.

 
Graceful shutdown or restart returns an error on Microsoft Windows Vista

A "Power management operation failed" error can appear when you check "Graceful power action" and try to "Reboot" or "Power off" a Microsoft Windows Vista computer. This occurs because one of the following:

  • The specified computer does not support a shutdown interface
  • The caller does not have the required privilege to perform this operation
  • The specified computer does not exist or is not accessible
  • An invalid set of parameters was passed
  • A shutdown has already been started on the specified computer
  • A system shutdown has already been scheduled
  • The system shutdown cannot be initiated because there are other users logged on to the computer
  • The format of the specified computer name is invalid
 
Not possible to update IP4 Route Table properties on some computers

It is not possible to update properties on the IP4 Route Table page in the Real-Time view if the target computer is running Microsoft Windows XP (32-bit and 64-bit editions) or Microsoft Windows Vista (32-bit edition only).

 
Not possible to update Operating System properties on some computers

It is not possible to update properties on the Operating System page in the Real-Time View if the target computer is running Microsoft Windows Vista (32-bit and 64-bit editions).

 
Cannot refresh the list of processes

In the Real-Time view, on the Manage Processes page, the refresh button does not update the list of processes. To see the current list of processes, in the tree view pane, right-click the Manage Processes node, and then click Open. This forces the page to re-read the processes from the target computer.

 
Intel Remote Access Policy page works with secure mode only

The Intel Remote Access Policy page works only with Intel AMT 4.0 and later computers that are configured with TLS or TLS with mutual authentication.

 
Unable to connect to Intel DASH computer configured in mutual authentication mode

Secure connection through WS_man protocol to Intel DASH platform configured in “Mutual authentication” mode is not supported.

 
Some reports do not work correctly

The following reports always display only the very first execution of the task, regardless of the number of times the task has run:

  • Password Reset Task Execution Audit
  • Power Management Task Execution Audit
  • Process Management Task Execution Audit
  • Service Management Task Execution Audit

To change the report's behaviour, you can modify the report's SQL query.

 
Not possible to update ASF alert subscription settings for Broadcom network adapters

It is not possible to modify ASF alert subscription settings for computers with Broadcom network adapters.

 
Setup and configuration server address is not displayed sometimes

In the Real-Time view, on the Intel AMT Configuration Mode page, the setup and configuration server address is not shown for computers with Intel AMT version 2.6 and 4.0.

 
Physical memory information for the modules that are not installed

The Real-Time view's Physical Memory page displays memory type and speed for the memory modules that are not installed. Ignore this information.

 
Error on the Intel AMT Network Settings page

When you change the IP or the host name of the target computer on the Real-Time view's Intel AMT Network Settings page, an "Unable to apply new settings" error appears on the page. This error appears because the connection to the target computer is lost after the IP has changed. You can ignore this error.

 
Get Out-of-Band Inventory task does not work with lower-case Kerberos user

Specify Kerberos users for RTSM connection in format "DOMAIN\user" with "DOMAIN" in upper case.

 
SOL/IDE-R Issues
 
HP BIOS settings for SOL

The following options must be configured in ME BIOS advanced settings for Intel AMT Serial-over-Lan to work correctly with HP computers:

  • SOL Terminal Emulation Mode: ANSI
  • Disabled echo char: ON
 
IDE-Redirection to floppy does not work on Dell client computers

When the SOL/IDE-R session is used to remotely boot a Dell client computer from a physical floppy diskette inserted into a floppy drive on the Notification Server computer, or from a binary floppy image file, the client computer performs a reboot but does not load the operating system. On the client computer's monitor, the message "Attempting remote IDE boot" appears, but the Real-Time System Manager's terminal window remains blank until the session is terminated. This is a known issue with Dell computers (tested on Dell OptiPlex 745c). The workaround is to start the client from other media (physical CD-ROM, DVD-ROM, or ISO image file).

 
Starting a new SOL session when another session is active

If a SOL session window is already opened for a computer, you must close it before establishing a new remote SOL connection to the computer. Otherwise, you may get an "SOL session terminated" error message.

 
SOL and IDE-R disabled in the target computer's BIOS

If SOL and IDE-R are disabled in the target computer's BIOS, the controls for these options on the AMT Settings page ("Task progress window and remote control" and "Redirect to optical/floppy drive or image on a server") are not disabled.

 
Issue with HP BIOS versions earlier than 1.5 and MS-DOS boot images

IDE-R session to a MS-DOS boot image may not work correctly with managed HP client computers that have BIOS versions earlier than 1.5. The workaround is to upgrade the client BIOS.

 
Alt+<key> sequences do not transfer to client computer during SOL session

When you use any Alt+<key> sequence on the keyboard during the Serial-over-Lan session, the controlled computer may not receive it.

 
Cannot install Windows using IDE-R on HP Compaq dc7700p system

Due to SOL emulation limitations, installation of a graphical operating system through IDE-R could lead to a BSOD on some Intel vPro implementations and is not fully supported by Intel AMT 2.x products. The problem affects HP Compaq Business Desktop System BIOS for Intel vPro Technology (786E1 BIOS). For resolution, download and install the latest BIOS/firmware update from the vendor's Web site.

 
The first line of the terminal output is not displayed in SOL/IDE-R session

When you establish a SOL/IDE-R session with HP computers with Intel AMT 2.5, the first line of the terminal output is not displayed in the remote console.

 
Ctrl+Alt+Del sequence does not work in the SOL session

Ctrl+Alt+Del key sequence does not work in the SOL session established with Intel AMT 2.5 devices.

 
Function keys do not work in the SOL session

If some of the F1-F10 keys do not work in the SOL session. Use <Esc>+1 - <Esc>+0 key sequence to emulate the function keys. This problem only occurs with certain BIOSs.

 
IDE-R task fails when client computer is in powered-off state

If the target computer is in a powered-off (S5) state, run the "Power on" task and then reboot with IDE-R activated.

 
SOL/IDE-R session terminates after 1 minute when it is run via wireless interface

On some hardware (HP, Fujitsu Siemens Computers), the SOL/IDE-R session initiated via wireless connection terminates after 1 minute. This is a hardware limitation. To work around this issue, do the following:

  1. In the Notification Server computer's registry, set the "HKEY_LOCAL_MACHINE\SOFTWARE\Altiris\eXpress\Notification Server\ProductInstallation\{13987439-8929-48d2-aa30-ef4bf0eb26a6}\InstantAMTPing" DWORD value to "1".
  2. Restart the IIS.

This workaround pings the Intel AMT device and keeps the wireless connection alive during the SOL/IDE-R session.

 
One-to-many server IDE-R task fails if the IDE-R session is left active from the one-to-one real-time task and vice versa

You must wait until the previous session is expired or terminate the session manually.

 
Boot redirection options not available for DASH computers

Real-Time View > Administrative Tasks > Hardware management > Redirection options are not available when connected to a DASH computer. This issue is firmware-dependent. Upgrading DASH firmware can solve the problem.

 
Upgrade issues
 
Re-create all Intel AMT certificates after performing off-box upgrade

When you perform an off-box upgrade, you install Symantec Management Platform 7.0 and Real-Time System Manager 7.0 on a clean computer. Because the computer has changed, you must re-create all certificates that you use for Intel AMT mutual authentication.

For more information on certificates for Intel AMT mutual authentication, see the Out of Band Management Component Implementation Guide.

 
Custom views not migrated

Real-Time System Manager custom views (for example, the SNMP sample view) migration from 6.x to 7.x is not supported.

 
Privileges not migrated

The Altiris Console users' privileges ( Configuration > Server Settings > Notification Server Settings > Security Roles ) migration from 6.x to 7.x is not supported.

 
Security settings not migrated

Security settings for Real-Time System Manager nodes in the Altiris Console are not migrated from 6.x to 7.x. You will have to configure security again after the upgrade.

 
Scheduled tasks not migrated

Real-Time System Manager tasks that you scheduled to run are not migrated from 6.x to 7.x. You will have to schedule the tasks again after the upgrade.

 
Real-Time Console Infrastructure Known Issues in this Release

Real-Time System Manager installs Real-Time Console Infrastructure 7.0 SP1.

For the list of Real-Time Console Infrastructure known issues in this release, see article 44492.

44492

Legacy ID



42769


Article URL http://www.symantec.com/docs/DOC1634


Terms of use for this information are found in Legal Notices