CA Client Automation

 View Only
  • 1.  Errors in Deployment of Agent Package

    Posted Sep 05, 2019 10:09 AM
    Hi,

    I'm attempting to push a known working AM/SD single agent package to some new customer Windows 2012 R2 target servers.
    Our ITCM solution is 14.0 SP2 and has been working well with a wide range of Windows target machines for around 6 months.
    This is a new batch of target servers that we have not seen before.  We don't own their build so we can't tell yet if this is an ITCM problem or one of some weird configuration of the targets.

    During the deployment wizard we see successful DMPrimer download and install with a DM server named certificate, then the agent package downloads to 100% - then it simply stays there until it times out well over an hour later.

    On the client side, the CA directory is created under Program Files (x86), the DMPrimer is downloaded, then the full agent package.  But then we see a few things on the client showing an error, which I believe are connected:
    Windows Application Log starts to show cacertutil.exe errors - these accumulate every few seconds until there are 10+.
    The Windows/Temp TRC_INST_ITRM_O log file shows a number of ERROR lines looking for cfEncrypt library (assume this is cfEncrypt.dll).  Says the network path was not found, but we see the exact path & dll file referenced does actually exist and was downloaded by the primer.
    The same log then concludes with the additional ERROR that it "failed to initialise SYSTEM encryption".
    At about this time the Windows Application error log gets a final error message, "Product: CA DSM Agent +AM plugin -- Error 1723. There is a problem with this Windows Installer package. A DLL required for this install to complete could not be run..."

    The CAF service on the client which had started to be installed then goes into a spin and shuts down.

    Nothing much more happens on the client.

    So - anyone seen anything similar or can offer further advice?
    I've already followed troubleshooting guides to check if CAM and general network comms are working between machines. No ports are blocked and we have success getting to other target servers in the same VLAN.

    Regards and thanks in advance.
    Bob.


    ------------------------------
    Never trust a man who when left alone with a tea cosy doesn't try it on - B Connolly.
    ------------------------------


  • 2.  RE: Errors in Deployment of Agent Package

    Broadcom Employee
    Posted Sep 06, 2019 07:11 AM

    Check the installer log files in the windows\temp directory for the full details.

     

     






  • 3.  RE: Errors in Deployment of Agent Package
    Best Answer

    Posted Sep 10, 2019 01:52 PM
    Traced to a bad system %path% variable - using a UNC value.  The CA ITCM installation could not process all paths.
    Secondly we hasd a subsequent problem with EnableLUA being set to zero (off) in GPO profiles and the registry on the target server. This needed to be value 1 (on) to allow interactive CAF service start.