KNOWN ISSUE: HTTPS push installation is failing using Internet Explorer 7

Article:TECH40392

Created: 2008-07-22

Updated: 2008-12-11

Article URL http://www.symantec.com/docs/TECH40392

NOTE: If you are experiencing this particular known issue, we recommend that you to receive email notification each time this article is updated. Subscribers will be the first to learn about any releases, status changes, workarounds or decisions made.

Article Type
Technical Solution

Product(s)

Show all

Languages

Show all

Problem

The agent pull installation works fine as well as the push installation without HTTPS, but when the attempt is made to push the Altiris Agent installation via HTTPS, the following occurs in the installation log file:

Requirements met OK.
2008-06-25 15:52:43: Sending 'Checked Prerequisites: Success' message to 'https://Server.Site.com/Altiris/'.
2008-06-25 15:52:43: Sending progress update to the NS site=Server.Site.com port=443
2008-06-25 15:52:43: Unable to read value from registry key 'HKLM\SOFTWARE\Altiris\AeXSWDInstSvc\InternetAccessType': The system cannot find the file specified. (80070002) (ASWDInstSvc.cpp line: 6552)
2008-06-25 15:52:43: Failed to send a progress data request to the HTTP server.: Server.Site.com (80072f19) (ASWDInstSvc.cpp line: 4477)

2008-06-25 15:52:43: Sending 'Starting Download: Success' message to 'https://Server.Site.com/Altiris/'.
2008-06-25 15:52:43: Sending progress update to the NS site=Server.Site.com port=443
2008-06-25 15:52:43: Unable to read value from registry key 'HKLM\SOFTWARE\Altiris\AeXSWDInstSvc\InternetAccessType': The system cannot find the file specified. (80070002) (ASWDInstSvc.cpp line: 6552)

2008-06-25 15:52:43: Failed to send a progress data request to the HTTP server.: Server.Site.com (80072f19) (ASWDInstSvc.cpp line: 4477)

2008-06-25 15:52:43: Resolved url https://Server.Site.com/Altiris/NS/NSCap/Bin/Win32/X86/NS Client Package/AeXNSC.exe.
2008-06-25 15:52:43: Unable to read value from registry key 'HKLM\SOFTWARE\Altiris\AeXSWDInstSvc\InternetAccessType': The system cannot find the file specified. (80070002) (ASWDInstSvc.cpp line: 6552)

2008-06-25 15:52:43: Unable to open URL 'https://Server.Site.com/Altiris/NS/NSCap/Bin/Win32/X86/NS Client Package/AeXNSC.exe' (80072f19) (ASWDInstSvc.cpp line: 1875)

2008-06-25 15:53:13: Resolved url https://Server.Site.com/Altiris/NS/NSCap/Bin/Win32/X86/NS Client Package/AeXNSC.exe.
2008-06-25 15:53:13: Unable to read value from registry key 'HKLM\SOFTWARE\Altiris\AeXSWDInstSvc\InternetAccessType': The system cannot find the file specified. (80070002) (ASWDInstSvc.cpp line: 6552)

2008-06-25 15:53:58: Resolved url https://Server.Site.com/Altiris/NS/NSCap/Bin/Win32/X86/NS Client Package/AeXNSC.exe.
2008-06-25 15:53:58: Unable to read value from registry key 'HKLM\SOFTWARE\Altiris\AeXSWDInstSvc\InternetAccessType': The system cannot find the file specified. (80070002) (ASWDInstSvc.cpp line: 6552)

2008-06-25 15:54:43: Resolved url https://Server.Site.com/Altiris/NS/NSCap/Bin/Win32/X86/NS Client Package/AeXNSC.exe.
2008-06-25 15:54:43: Unable to read value from registry key 'HKLM\SOFTWARE\Altiris\AeXSWDInstSvc\InternetAccessType': The system cannot find the file specified. (80070002) (ASWDInstSvc.cpp line: 6552)

2008-06-25 15:54:43: Download failed too many times. Aborting.
2008-06-25 15:54:44: Sending 'Finished Download: Failed' message to 'https://Server.Site.com/Altiris/'.
2008-06-25 15:54:44: Sending progress update to the NS site=Server.Site.com port=443
2008-06-25 15:54:44: Unable to read value from registry key 'HKLM\SOFTWARE\Altiris\AeXSWDInstSvc\InternetAccessType': The system cannot find the file specified. (80070002) (ASWDInstSvc.cpp line: 6552)

2008-06-25 15:54:44: Failed to send a progress data request to the HTTP server.: Server.Site.com (80072f19) (ASWDInstSvc.cpp line: 4477)

2008-06-25 15:54:44: Sending 'Finished Install: Failed' message to 'https://Server.Site.com/Altiris/'.
2008-06-25 15:54:44: Sending progress update to the NS site=Server.Site.com port=443
2008-06-25 15:54:44: Unable to read value from registry key 'HKLM\SOFTWARE\Altiris\AeXSWDInstSvc\InternetAccessType': The system cannot find the file specified. (80070002) (ASWDInstSvc.cpp line: 6552)

2008-06-25 15:54:44: Failed to send a progress data request to the HTTP server.: Server.Site.com (80072f19) (ASWDInstSvc.cpp line: 4477)

2008-06-25 15:54:44: Start cleaning the install service.
2008-06-25 15:54:44: Unable to delete client install exe: The system cannot find the file specified. (80070002) (ASWDInstSvc.cpp line: 1087)

2008-06-25 15:54:45: Sending 'Remote Install Finished: Failed' message to 'https://Server.Site.com/Altiris/'.
2008-06-25 15:54:45: Sending progress update to the NS site=Server.Site.com port=443
2008-06-25 15:54:45: Unable to read value from registry key 'HKLM\SOFTWARE\Altiris\AeXSWDInstSvc\InternetAccessType': The system cannot find the file specified. (80070002) (ASWDInstSvc.cpp line: 6552)

2008-06-25 15:54:45: Failed to send a progress data request to the HTTP server.: Server.Site.com (80072f19) (ASWDInstSvc.cpp line: 4477)

Environment

Notification Server 6.0
Internet Explorer* 7
SSL Certificates

Cause

Upon further research the installer service shows error code 80072F19 which translates to "ERROR_INTERNET_SEC_CERT_REV_FAILED". This error means that the Agent was unable to validate that the SSL certificate on the Notification Server has not been revoked. Certificate Revocation List (CRL) behavior apparently changed between Internet Explorer 6 and version 7.

Tried to disable Check for server certificate revocation from the following but it did not seem to make a difference: Internet Explorer > Tools > Internet Options > Advanced > Check for server certificate revocation.

The reason why the push fails against the pull is that the push runs as localsystem in a service whereas the pull runs as the local interactive user and therefore has access to parts of the registry that the service doesn't.

Solution

This issue has been resolved in Notification Server 6.0 R9 KB39160.

Supplemental Materials

Source	DEFECT
Value	SYD 36453
Description	Logged in sydd2 (Altiris - Sydney) database

Legacy ID

43207