Endpoint Security Complete

Hello,

I have a problem creating payloads in iOS Configuration Editor. I cant create payload. I am filling parameters and saving it. When I go out and come in to iOS Configuration Editor, pressing the type of payload i have nothing... Sometimes I got error like this:

Sometimes I can create payload and there all infos in it are empty like here:

I tried installing using SQLExpress, normal SQL trial. I got an APNS Cert. I have setup SCEP. Did install like in this tutorial:

 https://www-secure.symantec.com/connect/articles/symantec-mobile-device-management-71-proof-concept-installing-and-configuring-windows-serve

and using brian fromm videos tutorials.

What i did wrong ? Where to search for errors ?

Thank you for support.

Are more descriptive errors in the Altiris Log Viewer?  You could try reinstalling Silverlight as this is Silverlight-related.

Hello!

I have no error. But get many warnings like this:

Log File Name: C:\ProgramData\Symantec\SMP\Logs\a.log
Priority: 2
Date: 10/24/2011 4:00:24 AM
Tick Count: 242196750
Host Name: MOBMANSRV
Process: AtrsHost (1520)
Thread ID: 39
Module: AtrsHost.exe
Source: Altiris.TaskManagement.ClientTask.*
Description: SocketConnectionAcceptor.AcceptConnectionThread(): [10048] socket error during accept loop: System.Net.Sockets.SocketException: Only one usage of each socket address (protocol/network address/port) is normally permitted
at System.Net.Sockets.Socket.DoBind(EndPoint endPointSnapshot, SocketAddress socketAddress)
at System.Net.Sockets.Socket.Bind(EndPoint localEP)
at Altiris.DotNetLib.Sockets.SocketConnectionAcceptor.BeginListening()
at Altiris.DotNetLib.Sockets.SocketConnectionAcceptor.AcceptConnectionThread()

Reinstalling silverlight didnt worked

Reinstalling Silverlight didnt helped. 

Altiris Log Viewer didn`t show anything when trying to save from iOS Configuration Editor.

Is it a problem that machine is placed on VMware ?

I am also suddenly getting this error.  It seems to have appeared after installing the Server Management Suite.  The one thing I have noticed is that now there a no code basis being published.  Package Servers and clients don't know where to download packages from.

Any help will be appreciated.

We intend to release a fix for this in Q1 2012.

Doug, do you have additional details about this issue and the cause?  Any workarounds?  I had thought this was simply using HTTPS to access the SCEP payload configuration area (a different known issue which is resolved by using HTTP), but the screenshot shows HTTP.

This should allow the settings to be saved to the mobile management profile.  If UAC is turned on, when you navigate away from the profile, even after saving changes, the settings will disappear.

Once UAC is turned off, confirm you are able to save settings and profile data.

Hope this helps,

Jim

I agree with Jim. Turning off UAC resolved my issue.  This kb details how to disable uac: http://www.symantec.com/docs/TECH139699.

Note that I had the following errors:

SQL Server Logs: Login failed for user 'IIS APPPOOL/Classic .net AppPool'. Reason: Token-based server access validation failed wtih an infrastructure error. Check for previous errors. [CLIENT: 192.168.50.51]
Logon | Error: 18456. Severity: 14, State: 11.

a.log:
Log File Name: C:\ProgramData\Symantec\SMP\Logs\a.log
Priority: 8
Date: 11/23/2011 10:56:54 AM
Tick Count: 67386067
Host Name: MMS-NS
Process: w3wp (308)
Thread ID: 164
Module: w3wp.exe
Source: Item::Save
Description: An unexpected exception has occured (Item: c400d1c7-998c-444e-a051-5a823a381eeb, Exception: System.TypeInitializationException: The type initializer for 'Svr' threw an exception. ---> System.UnauthorizedAccessException: Filename: redirection.config
Error: Cannot read configuration file due to insufficient permissions

Thanks!

For my environment, I found that turning off UAC isn't necessary.  I got the same errors, but when I ran IE as an Administrator, I was able to do everything properly.

Actually that solution didn't work for me.

I followed the same instructions as piotrparfeniuk, got the exact same behaviour. This was on a Win2K8R2 SP1 (and then once more for luck on a Win2K8R2 without the SP1). The server is a VMware VM on ESX4. The SQL server is an off-box SQL2005 which appears to be working normally - and it certainly serving other DBs successfully.

If I switch off SSL I get the exact same error as piotrparfeniuk.  If I switch on SSL (which I think is how things are supposed to be set up?) it looks like this.

If I ignore the error and attempt to click the yellow * for New Payload, the page throws an error:

Webpage error details

User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
Timestamp: Mon, 5 Dec 2011 04:34:49 UTC

Message: Unhandled Error in Silverlight Application [Async_ExceptionOccurred]
Arguments:
Debugging resource strings are unavailable. Often the key and arguments provide sufficient information to diagnose the problem. See http://go.microsoft.com/fwlink/?linkid=106663&Version=4.0.60831.0&File=System.dll&Key=Async_ExceptionOccurred   at System.ComponentModel.AsyncCompletedEventArgs.RaiseExceptionIfNecessary()
   at MasterEditor.SCEPService.GetPayloadCompletedEventArgs.get_Result()
   at MasterEditor.TreeViewObjects.SCEPTreeViewNode.pes_GetPayloadCompleted(Object sender, GetPayloadCompletedEventArgs e)
   at MasterEditor.SCEPService.MESCEPServiceClient.OnGetPayloadCompleted(Object state)
Line: 1
Char: 1
Code: 0
URI: https://mdm.ahc.local/Altiris/MobileManagementSilverlight/ConfigEditor.aspx

Turning off UAC makes no difference. Running IE (IE8) as Administrator makes no difference. Reinstalling Silverlight (4.0.60831.0) makes no difference. Accessing the console via a remote browser makes no difference.

The problem here is that I'm on a short deadline (the project is to use Mobile Management to roll out managed iPads) and I can't get this part of the software to work at all.

Is there any sure fire way to get this to work? Any particular OS, patch level, etc? I can easily blow away my dev environment and start again, but I've done that three times so far and have got nowhere.

I freely admit that IIS, Silverlight and server certificates are not my forte, and I would really appreciate some guidance from someone more clueful than myself.

Help?