Client Management Suite

Guys,

Need some help in installing Altiris Agent 7.5 directly from the Console. I have got a NS and couple of Site Servers Configured. I am pushing the Agent on couple of machines where Site Server is already configured from the NS console by selecting "Download the Package from the closest package server". Agent is getting installed without any issues. But it is downloading directly from the NS instead of site server which is causing WAN traffic.

I want to push the agents from the console but the package download should happen locally....

Any Ideas.......

See same query question

Client download agent and package from site server

https://www-secure.symantec.com/connect/forums/client-download-agent-and-package-site-server

Hello James,

Thanks for the information. I found all the settings are correctly configured. I have attached the log for your reference. In this log, PC tries to download the package from its Site Server but it failes for some reason and after retrying for few minutes it automatically gets it from the NS. Please review the log once you will understand.

Thanks

Attachment(s)

Install Log.txt   21 KB 1 version

ERRR MsCryptoSslDataTransformerImpl: InitializeSecurityContext error while client handshake: The certificate chain was issued by an authority that is not trusted (0x80090325)

Client PC is unable to perform successful ssl handshake with your Package Server https://astsm006.kmt.kmtl.com/Altiris/

• Make sure that certificate of https://astsm006.kmt.kmtl.com/Altiris/ is installed in trusted root on your client PC. https://www-secure.symantec.com/connect/forums/cms-75-sp1-agent-installation-failed-https-certificate-issues

Hello Igor,

In this case, I beleive certificate gets installed on the Agent as part of the installation as I select "Install Server Certificate to the Client Machine". I found its listed under Trusted Root.

Hi Raffu,

1. You've installed certificate of NS server but not of remote Site Server.

2. Make sure that main issuer certificate is correctly installed on your client PC.

• Go to mmc -> trusted root -> double click on issuer certificate -> check that there is no errors and chain is correct.

Hello Igor,

Do you mean, NS certificate has to be binded in Site Server IIS Settings with HTTPS 443?

Hello Raffu,

No, I mean about your Active Directory Certificate enrollment.

Questions:

• You're using an internal MS CA or self-signed certificates?

Try to:

• Go to on client computer, where problem occured ⇒ open I.E browser ⇒ try to open this URL https://AWYSM030.kmt.kmtl.com/Altiris/ of your remote Site Server (Not NS Server) ⇒ is there any errors related to SSL in I.E browser, after opening SIte Server URL on client pc?

Sorry! I've previouslly incorrectly specified https://astsm006.kmt.kmtl.com/Altiris/ as remote PS Site Server, however your PS Site server is https://AWYSM030.kmt.kmtl.com/Altiris

Hello Igor,

We are using Self Signed Certificates.

Then you need to install Self-Signed certificate of remote Site Server in trusted root of each client computer to make successfully SSL handshake between client and remote Site Servers via HTTPs.

Raffu,

Do you need additional assistance?  If not, would you kindly mark one of the responses as a solution to your question?

Thanks!