Video Screencast Help

Task server not registered

Created: 18 Mar 2014 • Updated: 24 Mar 2014 | 42 comments

Hi 

We have just installed ITMS 7.5. The NS server is in Hongkong and we have installed 2 site server in two different country. Package is downloading on package server but task server showing blank. It is not registered.

Task server.JPG

Operating Systems:

Comments 42 CommentsJump to latest comment

Alex Bizjajev's picture

HI,

Please check SMA logs on a computer that cannot register on Task Server. Logs should contain lines like "attempting to register on task server SERVER_NAME" (you may clean-up logs to reduce the amount of log messages and then press "reset agent" button to initiate re-registration process).

Verify client can ping SERVER_NAME.

Also, check state of services: "Altiris Client Task Data Loader" and "Altiris Object Host Service" -- both should be started on NS and on site-servers.

Check NS log for errors or warnings from Atrshost.exe and CtDalaLoader.exe modules.

Thank you,

Alex.

CBZ9104's picture

Hi Alex

We have check everything it is fine.............but still not communicating

Alex Bizjajev's picture

If possible, please share the logs from the clients that cannot register to TS.

Thank you,

Alex.

CBZ9104's picture

Hi Alex

Find attach logs of client system.

AttachmentSize
logs.rar 59.29 KB
Igor Perevozchikov's picture

On attempt to register client task agent with task server, it fails due ssl handshake error.

<event date='03/18/2014 17:09:56.7930000 +05:30' severity='1' hostName='INMUBSSC0277' source='MsCryptoSslDataTransformerImpl' module='AeXNetComms.dll' process='AeXNSAgent.exe' pid='5224' thread='6064' tickCount='23502187' >
  <![CDATA[Failed to perform client handshake, error: The Local Security Authority cannot be contacted (0x80090304)]]>

Please, make sure that certificate is correct in "Trusted Root Certification Authorities Certificate Store".

Try to open this URL via browser on this computer, where client task agent unable to register ⇒

https://apinmubsscutl01.resourcesindia.com/   you will see whether there certificate error occur or not.

iddqd idkfa idclip

CBZ9104's picture

Hi Igor

Ya the URL is not is not opening it giving message

Internet Explorer cannot display the webpage

Alex Bizjajev's picture

Hi CBZ9104,

If possible, may you share logs from the site-server also?

That OS you use for the site-server?

Thank you,

Alex.

Alex Bizjajev's picture

Hi,

Please ensure Task Servers has the same version as Symantec Management Agent - server with version 7.5.1670 won't be able to handle SMA agent with version 7.5.1670.11. You need to check version of "Altiris Client Task Server Agent" plugin on SMA Settings screen.

If versions are different, then you will need to upgrade Task Server. Open NS Console - Setings - Notification Server - Site Server Settings. Expand Site Management - Settings - Task Service - Advanced. There are two upgrade policies for the Task Servers - enable appropriate one and ensure upgrade will pass on a site-server side.

Thank you,

Alex.

kharmon@cocc.edu's picture

I had that issue. We had CMS 7.1 and upgraded to 7.5. The task servers and clients showed not registered. Support assisted in finding a solution: 

Solution:

Set Enable 32bit Applications to False on Default App Pool

In IIS select Application Pools

Select Default App Pool - Right Click - select advanced Settings

Set Enable 32-bit Applications to "False"

Cmd prompt: iisreset

 

 

Solution Page: http://www.symantec.com/business/support/index?page=content&id=TECH213037

 

Hope this helps

 

Ken

Falquian's picture

Hi, CBZ9104:

Make sure the task server plugin is correctly installed on the Task Server. We had several issues because some plugins were not properly installed on our Task Servers

 

Kind regards:

     Falquian

If this post is useful to you, remember to mark it as a solution ;)

CBZ9104's picture

Hi

Now we have 3 site server in 3 different countries. What will be the constrained and unconstrained settings I have to do in console.

Currently all are uncheck

SK's picture

If each contry is its own site, then all package services need to be unconstrained, as constraned package services can only download from unconstrained package services within the same site.

Connect Etiquette: "Mark as Solution" those posts which resolve your problem, and give a thumbs up to useful comments, articles and downloads.

CBZ9104's picture

Hi SK

You mean all are uncheck.......

JoeVan's picture

The setting for "constraned" has nothing to do with agent registration to task servers, only only controls where the package servers retrieve their source files. 

As SK commented, the only time you need to consider this setting is when you have more than one PS per site. 

Joe VanHollebeke
Systems Engineer

CBZ9104's picture

Hi all

Just now we have removed site server of India location and my client are able to get task server now.

So now I am uninstalling site server and task server completely from India site server and reinstalling after that lets see what will happend.

CBZ9104's picture

Hi All

It is observe that agent and all the plug ins installed successfully but while installing task service it the servrer not getting package to install task server. I have check only to download history for Task Service Install (x64) showing blank

I have installed manually Task service install(x64) but still task server not showing.

Deployment package server and Deployment Task server also not installing on the same site server but rest of country server it is installing properly.

Alex Bizjajev's picture

Hi CBZ9104,

If you have problems with Task Server package download and TS install then it is could be that Task Server setup process from previous install still active and you won't be able to rollout Task Server until it is killed. Please open Windows Task Manager, switch to the Processes tab and look for TaskServerSetup.exe process. If you see it then most probably this is the reason of the problem. Try to restart computer and try roll-out task-server again.

Thank you,

Alex.

Igor Perevozchikov's picture

You can try to manually download and install TaskServer x64 on your remote Site Server.

Download Task Server Setup x64 package from your SMP Server to your Site Server

Note!: Such manual installation of Task Server on remote Site Server acceptable only if you've already added this server as remote Task Service on your SMP Server but Task Server rollout policy isn't active and shown as expired.

  • \\%Address of your SMP Server%\NSCap\bin\Win64\X64\Client Task Management\Server Package\Task ServerSetup_x64.exe.
  • Manually execute Task Server installation on remote Site Server ⇒ check result ⇒ If installation will be successfuly completed, make sure that "Altiris Object Host Service" and "Altiris Client Task Data Loader" are running.
  • Try to register client task agent on your client computer
  • If registration will fails once again, then check client SMA logs ⇒ if there will be SSL handshake errors, then check your Certificates on client computer.

Thanks,

IP.

iddqd idkfa idclip

CBZ9104's picture

Hi Igor

We have uninstalled all the package and task service from console, also uninstalled the altiris agent and restart the same. After that we have installed the agent again and this time all the services like, task service agent and deployment agent got installed successfully it will installed from NS side only.

But still it is not taking task server.

And if i remove task and package service from console after uninstalling from agent it will get task server

 

Alex Bizjajev's picture

Did I understand correctly:

1. You have Task Server on NS side. It is works fine.

2. If you install Task Service to remote computer then such Task Server does not work, even if "Altiris Task Server Agent" plugin is shown in SMA properties as installed.

If both is true, may you share logs from the remote task server, which does not work? OS and config details will be also appreciated.

Thanks!

Alex.

 

 

Igor Perevozchikov's picture

Hi,

there is nothing to do, without SMA logs on client side and SMP Server logs. Click "Reset Agent" in SMA on client computer, gather logs and attach them (assume that there will be same problems as shown in previously attached log, where problem is with SSL handshake with Task Server and your SMA client computer)

Question:

  • You've uninstalled Task Server and Package Server which were running on SMP Server localy? Or you mean about remote Task Server and Package Server?

iddqd idkfa idclip

CBZ9104's picture

HI Igor

Today again my agnet not getting task server.

Find attach client logs

AttachmentSize
Logs.zip 125.16 KB
Alex Bizjajev's picture

Hi CBZ9104,

If possible, please also attached logs from INBOMSSC0003 computer.

Thank you,

ALex.

CBZ9104's picture

Hi Alex

Find attach INBOMSSC003 logs which is site server....

Now again When i remove package and task service client will get task server.

 

AttachmentSize
INBOMSSC0003.rar 83.1 KB
Alex Bizjajev's picture

From clients logs:

Last successfull attempt to register to INBOMSSC0003 was at 9:04 AM.

At 9:26 network monitor module of SMA reported what "server down"

Starting from 9:56 any attempt to register to the server fails.

Something has changed with server or network state in this time period.

Thank you,

Alex.

CBZ9104's picture

Hi Alex

Thanks a lot

But what should i Chek now...

Alex Bizjajev's picture

From INBOMSSC0003 logs: last record from Task Serve component is at 24-Mar-2014 12:30:49 PM: "Task Serve Uninstall still rinning" - seems like Task Server has been uninstalled from the computer.

As I understood, you've just installed the TS back to INBOMSSC0003 and right now client could register to this TS. Was it manual install by launching Task Server msi on INBOMSSC0003 or it was push install from NS Console -> Site Servers page?

 

Note: while TS was installed onINBOMSSC0003 a lot of warnings like "removed client record for not allowed endpoint" were logged. Please ensure these records are expected, i.e. clients in your environment are in "allowed" state. You may review "Reports -> NS Management -> Registration" reports to have better understanding of client's state.

Thank you,

Alex.

CBZ9104's picture

Hi Alex

Again I removed only task service from console now again ,my clients getting task........

 

Alex Bizjajev's picture

Please take a look a bitmap below - is this the same state as your site-server INBOMSSC0003 has in NS ?

24-mar-2014--site-server-view.png

CBZ9104's picture

Ya almost

We able to all service except monitor service... because we only using CMS suite

Alex Bizjajev's picture

OK, so you have site serve with three site-services: TS, PS and NBS enabled. And clients could be registered to this site-server - this is good.

I wish to ensue what you will not run into the situation, when unexpected uninstall will remove TS from the site-server. Please perform the next steps:

1. Open NS console -> Settings -> Notification Server -> Resource Membership Update. Press "Policy update schedule", wait until it will be completed. Press "Complete update schedule", wait until it will be completed (could take a while).

2. Connect to site-server computer, open SMA settings and press "Update" button.

In a good case, nothing will happen after such actions.

In a bad case, task server will be uninstalled from the site-server. And I will have to think about steps we will need to perform to resolve the situation.

Thank you,

Alex.

CBZ9104's picture

Hi Alex

We have done the Resource membership update and all but still issue remains same.

If we remove task server service from package server it gets registered with task server same happens with vietnam site server. We deploy new site server in vietnam location that server wont registered with task server but when we removed task service from that server it gets registered with near by task server

CBZ9104's picture

Hi All

Finally I reinstalled the server now it working everything fine.

Igor Perevozchikov's picture

Hi,

First, If you have all these Task Servers installed and they are running (where you client computer unable to register with)

  • Try to manually re-register your client computer with Task Server
  • Gather logs from this client computer and attach them

Will be great, if you will provide list, which Site Server hostname related to what country for better understanding of log analyzing.

 

Optional additional checks just to make sure that infrastructure is OK:

1. Make sure that all your subnets are synchronized and available on "Site Server Management" page, where clients are running and Site Server are running. You can refresh subnets manually to have up-to-date list of all available subnets.

SubNet_Resync.jpg

2. Make sure that Site(s) where Site Servers are running, has all appropriate subnets in case if you have Site(s) created in "Site Server Management" page. (If these subnet if added to Site(s), but subnet where client is running isn't added to any Site, then client will not be maintenaned by Site Servers).

Sites_0.jpg

 

3. Make sure is there any "Manually Assigned Agents" set for Site Server or for Site (In case if manual assigment is set, then only these client computers will be maintenaned by this Site - Site Server)

ManualAssignemtnSite.jpg

iddqd idkfa idclip

CBZ9104's picture

Hi Igor

We have checked all the above things but there is no change.

Currently my site server registered with task server it self fine but location agent not registered with task server.

Find attach sample client machine latest logs

AttachmentSize
agent logs.rar 12.69 KB
Igor Perevozchikov's picture

Hi!

According to log output, Agent says that your Site Servers are down, otherwise client computer unable to establish HTTP connection to these servers:

  • Server down: http://inbomssc0003.global.publicisgroupe.net:80:{15A168AD-D78E-45DB-8EE5-7E093891367D}
  • Server down: https://inbomssc0003.global.publicisgroupe.net:443:{DB919C53-A17B-4CC8-8335-8786146FDA87}

Also I see that client SMA agent unable to post event due similar network problems between client computer and NS Server:

  • PostFile to 'http://hkhkgdutssc0002.global.publicisgroupe.net/Altiris/NS/Agent/PostEvent.aspx?priority=0&source=A1218DF5-B1FC-4590-9ED5-D5FFF75B50F5' failed: HTTP Request Failed: No such host is known. (80072af9)

 

Ensure that you don't network issues between your client computer with Site Servers and NS Server as well. Try to open their URL in browser on client computer, check nslookup and ping by fqdn.

 

Thanks,

IP.

iddqd idkfa idclip

CBZ9104's picture

HI Igor

Both URL http and https are not opening.

for network issue if we uninstall task service from site server the client communication is working fine. all clients getting registered with available task server which is nearest.

Igor Perevozchikov's picture

Do you mean that this Task Server which isn't accessible for your client, also isn't accessible for other clients as well? You better troubleshoot this problem why client unable to establish connection via fqdn of your remote Task Server, or check what happening with this Task Server there /IIS.

CTA registers with Task Server, using own settings. Probably you have same default settings for CTA

CTA_Settings.jpg

iddqd idkfa idclip

CBZ9104's picture

Hi Igor

Task Server  isn't accessible from my client, also isn't accessible other clients as well.

I have done the default setting of Task agent settings

 

Igor Perevozchikov's picture

Hi CBZ9104,

I'm a little bit confused.

Client unable to even ping this Task Server machine and also nslookup it? Or your Task Server machine is firewalled, therefore client computer unable to establish there connection via HTTP/HTTPs, ping it, etc?

Thanks,

IP.

iddqd idkfa idclip

CBZ9104's picture

Hi Igor

Its shocking now.....

I format my site server and reinstalled everything.......Just for 2 days site server and all the India location clients registered with server but again 2 days later site server is showing unregistered and all India location clients as well.

And again same If I installed site server and task server on my Windows 7 desktop/latop all India location gets registered and the server too.

jms97's picture

Possibly a dumb question, but have you verified the "default website" is running on the Task Server?