SIM Symantec Installation Manager Check for Updates Ok, but verify failed to execute - "Products were unable to be verified for download"

[Pascal KOTTE]

The System time is correct all the same we have some warning in the system eventlog W32Time

Event Type: Warning
Event Source: W32Time
Event Category: None
Event ID: 27
Date: 17.07.2009
Time: 8:00:29 AM
User: N/A
Computer: X1
Description:
Time Provider NtpClient: The response received from domain controller X2.domain.ch is missing the signature. The response may have been tampered with and will be ignored.

I see nothing in the altiris log viewer.

& nothing in the SIM installation logs
C:\DOCUME~1\admin\LOCALS~1\Temp\SIM Logs\SIM*



Customer site is standard FW rule outgoing HTTP/FTP ok, no proxy using.

Host is a R2 SP2 with all latest Windows Update (except IE 8 of course !)
Any idea?
thanks.

[Pascal KOTTE]

https://www-secure.symantec.com/connect/forums/problems-symantec-installation-manager-times-out-when-verifying-products-download-please-wait

[Migration User]

If you check the dates on those other posts, they were quite some time ago. So, if it's the same issue, it would be a new occurance. I will see if I can ask Symantec support to take a look.

[Migration User]

I'm escalating this thread to support, and I'm going to email an admin to see what who they can contact to look into this directly. I'll keep you all posted on what I find out.

Thanks,
Matt

[Migration User]

I emailed the support team for this issue. They are planning on having a response by Monday afternoon. If this is too long for a response, please feel free to create a support case in MySupport (https://mysupport.symantec.com). Sorry for the inconvenience this is causing you.

[Migration User]

The support team got back to me a lot sooner than I thought they would. Their response stated the only thing that could be causing this error is incorrect system time. Since you stated that your system time is correct, we suggest you create a support case how I indicated before in MySupport.

[Pascal KOTTE]

I am thinking also a miss configuration of certificates or similar - So we will create a case if this is not solved. I will publish in there the result our investigation.

[Pascal KOTTE]

We detect W32time error with invalide source server, but we correct it, restart w32time service, => same error. I will restart the server...

[Pascal KOTTE]

https://kb.altiris.com/article.asp?article=48188&p=1

[Migration User]

Problem is back today. And time is correct on server. If you open the page with Internet Explorer you receive messages like "Server Too Busy". Perhaps Symantec should think about clustering there webservices to make them faster and more reliable.

[Pascal KOTTE]

We have an open case 320-226-998 - and currently we confirm it works correctly with the Full Internet Access open for the Altiris server. But not if restricted back on customer site.
The problem is, which ports/protocoles/host, are all required to be able a complete CMS7 server working/updating correctly ?

http://lindon.extranet.altiris.com/eval_license_broker/get_licenses.asmx ?
http:*.solutionsam.com/*, https also ??
Microsoft sites for patchs checksum verfications ??
http:*.symantec.com/* ??
etc...

Well, any body got a full & complete list, Which KB(s) ?

[Migration User]

I also had open a case, and it was confirmed by symantec that lindon.extranet.altiris.com was not reachable for one day. At the moment everything is back to normal, but for how long :-)

[KSchroeder]

Working OK for me today too, I'm installing all the SP3 stuff on my NS7 crash and burn box, working fine so far!

[Pascal KOTTE]

 "
SIM uses port 80 (to download and request) and the sites that should be allowed on the firewall/proxy are (Article ID: 47137):
http://www.solutionsam.com/solutions/pl/symantec.pl.xml
http://www.symantec.com/about/profile/policies/privacy.jsp
http://lindon.extranet.altiris.com/eval_license_broker/get_licenses.asmx
 

If you look under [HKEY_LOCAL_MACHINE\SOFTWARE\Altiris\AIM\] directory you will find that are three places that have specifically sites that SIM needs access to:

[HKEY_LOCAL_MACHINE\SOFTWARE\Altiris\AIM]
[HKEY_LOCAL_MACHINE\SOFTWARE\Altiris\AIM\Licensing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Altiris\AIM\Configuration\ProductListings\0]

"
 
Thanks to Philipp,  
but I am not sure not missing some more (eg. for patch download & file signature validation, done with a Microsoft web site?)

[Migration User]

I'm having the same issue this morning. a.log says Trade Compliance Check Failed: Could not connect to trade compliance server. I have nothing blocking out port 80 access from this machine to any/any, and I've never had this problem on any machine until today. Time settings are fine and I'm not receiving w32time errors in the syslog. I can hit all the sites listed above from this box.

[Migration User]

after an hour or so the service was restored.

[Pascal KOTTE]

• Patchs:
  • http://www.solutionsam.com/imports/7_0/patch/microsoft/pmimport.cab
  • http://www.solutionsam.com/imports/7_0/patch/adobe/pmimport.cab