IT Management Suite

 View Only
  • 1.  Can Altiris agent use FQDN to connect to task server

    Posted Dec 08, 2017 01:51 AM

    I am deploying Altiris 8.1 agent to client computer. Altiris agents can connect to NS server by FQDN svr1.domain.com, but they use computer name of the server "svr1" to connect to task server. The deployed agents are connect to server via Internet since they are no on the same LAN with server. The agents cannot find TS since they are using server name "svr1" to connect to. I use Windows "hosts" file to map "svr1" to the public IP address of the server and it works. I have try this KB, https://support.symantec.com/en_US/article.INFO2892.html, but it doesn't help. How can I force agents to connect to Task server by using FQDN "svr1.domain.com"?

    My enviroment:

    - Server and agent are v.8.1 newly installed.

    - Only one NS server with TS

    - Agents are connect to NS/TS via Internet

     

    Thanks for any reply,

    Michael 



  • 2.  RE: Can Altiris agent use FQDN to connect to task server
    Best Answer

    Broadcom Employee
    Posted Dec 08, 2017 06:52 AM

    Hi mikelien!

    1. You have NS FQDN or HostName in CEM Gateway for NS machine?
    2. Does CEM gateway machine resolve NS address as FQDN or just hostname?
    3. What Address is shown if you will:

    Open NSConfigurator.exe from NS machine C:\Program Files\Altiris\Notification Server\Bin\Tools\NSConfigurator.exe -> find there "TaskServiceAdvancedSettingsAllowed" and enable it.

     Now Open SMP Console -> go to "Site Server Management" page -> open "Task Service Settings" page and check your 'preferred host:'

    Thanks,

    IP.



  • 3.  RE: Can Altiris agent use FQDN to connect to task server

    Posted Dec 08, 2017 10:43 AM

    Hi Igor,

    Thanks for the reply.

    I don't have CEM gateway. I just open ports 80/443/50124 on firewall direct into NS server.

    The preferred host in Task Service Settings is "https://svr1/Altiris/". Should I change it as "https://svr1.domain.com/Altiris"?

    M.



  • 4.  RE: Can Altiris agent use FQDN to connect to task server

    Broadcom Employee
    Posted Dec 09, 2017 06:56 AM

    You mentioned that:

    - Agents are connect to NS/TS via Internet

    So I assumed that your clients are connected with NS via Cloud Enablement Management Gateway (CEM)

    Try to change TS preffered host name to FQDN instead of current hostname and force "Get client policy" for all managed endpoints to have these changes applied.



  • 5.  RE: Can Altiris agent use FQDN to connect to task server

    Posted Dec 12, 2017 08:57 AM

    I can now register to NS/TS by using FQDN and to run a task "Get IP Configuration" from NS to agent. 

    But the agent still using only server computer name to download plug-ins. The agent now pending for downloading application metering plug-in, inventory plug-in and software management plug-in. Is there a way to use FQDN URL to download plug-in too?



  • 6.  RE: Can Altiris agent use FQDN to connect to task server

    Broadcom Employee
    Posted Dec 13, 2017 09:55 AM

    Assume that this will help to set correct NS address to deliver package(s) codebase(s) for client(s), then they will download them by specified NS address

    Changing the package codebase of your Altiris Symantec Management Platform

    This can become handy when your clients can’t resolve the Full Qualified Domain Name (FQDN)
    By default, during the installation of the Symantec Altiris Notification Server, SIM (Symantec Installation Manager) populates this regkey with whatever server name you selected during the configuration page during the initial installation, which usually is the Full Qualified Domain Name (FQDN). So, in order to modify the preferred Notification Server hostname for SWD codebase and snapshot URLs, you need to do the following:

    • Open the Registry Editor (Open the RUN prompt and type regedit and click OK)
    • Go to HKLM>Software>Altiris>eXpress>Notification Server and open the PreferredNSHost regkey.
    • Modify the PreferredNSHost regkey by adding the NetBIOS, FQDN, or IP Address that you want to use for SWD codebases and snapshot URLs.
    • Restart the Altiris Service
    • Then go to Control Panel>Scheduled Tasks and run the NS.Package Refresh schedule (by default it runs everyday at 3:30am). By running this schedule, the SWD codebases and snapshot URLs should be updated.

    Note: If for some reason the PreferredNSHost regkey is not present but there is the reference of it on the coreSettings.config, just recreate the regkey. Create a String Value and call it 'PreferredNSHost'.