Client Management Suite

 View Only
  • 1.  Windows System Assessment Scan fails with Exit Code: 4

    Broadcom Employee
    Posted Jun 30, 2017 04:33 AM
      |   view attached

    Hello,

    I have problem on two Windows Server 2003 with Windows System Assessment. Scan is not working.

    Certifications from https://support.symantec.com/en_US/article.TECH239756.html have been installed, but it not fixed the issue.

    You can find the error in attachment.

     

    Any idea how to solve it?

     

    Thanks.

     



  • 2.  RE: Windows System Assessment Scan fails with Exit Code: 4

    Trusted Advisor
    Posted Jul 03, 2017 11:42 AM

    Hi LukasAFT, 

    Have you verified that the certificates are installed on a client?

    Thanks



  • 3.  RE: Windows System Assessment Scan fails with Exit Code: 4

    Broadcom Employee
    Posted Jul 05, 2017 03:26 AM

    Hello Sam Pace,

    Yes, i verified that certificates are installed.

    Regards,

    Lukasz



  • 4.  RE: Windows System Assessment Scan fails with Exit Code: 4

    Trusted Advisor
    Posted Jul 05, 2017 04:32 AM

    Hi Lukasz,

    When you run the patch assessment on the client, what are the errors in the logs for the SMA?

    Can you also confirm if the patch assessment package that is on these broken machines matches the patch assessment package of a working machine? I've provided my versions below to compare to if required. The package can be found at: C:\Program Files\Altiris\Altiris Agent\Agents\SoftwareManagement\Software Delivery\{6D417916-467C-46A7-A870-6D86D9345B61}\cache

    Open AexPatchAssessment.exe and check the version in the details tab. 

    My AexPatchAssessment.exe version: 7.2.2566.0

    Can you also check that the MetaData Import Task is running successfully?

    Thanks



  • 5.  RE: Windows System Assessment Scan fails with Exit Code: 4
    Best Answer

    Posted Jul 05, 2017 11:41 AM

    Hi Lukas,

    The 2003 servers needing KB968730 from Microsoft.

    This KB is titled  "Windows Server 2003 and Windows XP clients cannot obtain certificates from a Windows Server 2008-based certification authority (CA) if the CA is configured to use SHA2 256 or higher encryption." 

    The Windows Assessment scan requires utilizes certs that use the SHA2 encryption. 

     

    https://support.symantec.com/en_US/article.TECH239756.html

    Note: Additional causes which result in Exit Code 4 following the resolution methods listed in the Solution section below:

    • GPO (Group Policy) preventing the Certificates from being installed 
    • Confirmed that Windows Server 2003 is unable to support SHA2 as outlined by Microsoft; may install the HotFix provided on KB968730, or request the fix via the "View and request hotfix downloads" link on the Microsoft Support Page.

     

     

    Thanks,

    Arul.A



  • 6.  RE: Windows System Assessment Scan fails with Exit Code: 4

    Broadcom Employee
    Posted Jul 06, 2017 09:38 AM

    KB was missing...

    Thank you very much Arul!