Intel vPro® Platform
Intel Manageability Forum for Intel® EMA, AMT, SCS & Manageability Commander
2827 Discussions

Have you seen this error? - Altiris

idata
Employee
3,706 Views
Anyone resolved this issue before? Any ideas?When trying to utilize OOBM component with Altiris we ran up against the below errors (screen capture below):

h6. Error connecting to the Intel AMT Setup and Configuration Server. Verify that Intel AMT Setup and COnfiguration Server security settings are configured and AMTConfig service is running. See documentation for details on troubleshooting the Intel Setup and Configuration Server installation.

 

The connection with the server database has been lost.

 

h6. Current user can't view this page.

 

h6. Current user can't change setting on this page.

We tried various solutions throughout the day which included:

Right-click and select Copy Shortcut https://kb.altiris.com/article.asp?article=38810&p=1 - The SQL instance is running in mixed mode - NO work

Out of Band isn't a licensed product and has no enforcement mechanism so we enabled trace logging per the instructions in this link Right-click and select Copy Shortcut https://kb.altiris.com/article.asp?article=34418&p=1 Details:

  1. Go to Start > Run, type Regedit, and click OK.

  2. Browse to HKEY_LOCAL_MACHINE > SOFTWARE > Altiris > eXpress > Notification Server > ProductInstallation > {09954bad-a09c-43ce-b8ad-407b6b93c936}.

  3. Create a DWORD value named TraceLevel.

  4. Set the value at 255 Decimal, FF hex.

  5. Download dbgview.exe (DebugView from Sysinternals/Microsoft) from http://www.sysinternals.com/ (you'll be redirected to Microsoft), click into the Miscellaneous section, and download Debugview.

  6. Execute dbgview.exe.

  7. Now walk through the function you wish to capture trace level logging on.

  8. The debug windows should fill up with entries.

  9. Use the Save command when trace logging in complete.

Sent the output to Altiris. They recommend we reinstall OOBSC with the below process...didn't work.

Here is the process recommended by Altiris:

  • 1. From Add/Remove Programs uninstall: 'Intel Active Management Technology Setup and Configuration Service'.

  • 2. Now on the Notification Server, log in as the user who you will set as the main account for Intel SCS.

  • 3. Browse to the following location: NS Install Path\Program Files\Altiris\Notification Server\NSCap\Bin\Win32\X86\OOB\IntelSCS\

  • 4. Launch the file AMTConfServer.exe.

  • 5. Walk through the setup (During the IIS setup there is a check-box for HTTPS, uncheck this).

  • 6. When complete, restart IIS (Start > Run > type: iisreset > Click OK).

Between all this troubleshooting we also installed intel's SCSConfServer.exe manually. We logged in and it works - we could provision systems, but w\o a Altiris it doesn't matter. Any ideas?

0 Kudos
16 Replies
JoshHilliker
Employee
2,664 Views

Another add is that we validated through Intel AMT SCS console that we had good connectivity to the SCS DB (i.e. IntelAMT table in SQL).

0 Kudos
William_Y_Intel
Employee
2,664 Views

I'm not familiar with Altiris but from my experience with SMS/SCS, I would start looking at the SCS User groups to see if the logged in user to Altiris (or the Altiris Service if there is one) has been added to SCS as an Enterprise Administrator. With SMS addon, you install the addon as a service with a given service account. You list this service account in SCS as an Enterprise Administrator and this allow the SMS addon to access SCS.

0 Kudos
idata
Employee
2,664 Views

Have you stopped and restarted the AMTConf service to verify that it is running properly?

Are you running the latest versions of Altiris with the Altiris SCS installer?

0 Kudos
idata
Employee
2,664 Views

On that note, after you restart the service check the system eventlogs for any errors. I have found the errors in there incredibly useful whenever I had problems.

Alex

0 Kudos
idata
Employee
2,664 Views

Exactly. It sounds like Altiris is not communicating with the SCS service to provision properly. It may be something as simple as who the "log on to this service as..." is set to.

0 Kudos
idata
Employee
2,664 Views

I will try and retry some of these suggestion when at the customer site Thursday\Friday...thanks.

0 Kudos
idata
Employee
2,663 Views

We are having the exact same issue trying to get this to work with Altiris. Tried the reinstall. Getting the error below near the end of the install:

LaunchAppAndWait failed!

Failed to add login user

Error code: 104

SQL 2000 on Windows 2003 SP1.

SQL authentication is set to mixed, using the app identity for the Altiris service to be the AMT service.

After install the AMTConfig service is started and running.

In the application event log, there are the following errors:

Type: Error

Source: AMTConfServer

Event ID: 1001

Event Time: 12/5/2007 12:49:12 PM

User: n/a

Computer: AltirisNS

Description:

The connection with the server database has been lost.

AND

Type: Error

Source: AMTConfServer

Event ID: 1001

Event Time: 12/5/2007 12:58:22 PM

User: n/a

Computer: AltirisNS

Description:

User DOMAIN\AltirisService does not have the privileges required to execute the SCS Server. Startup aborted.

Any ideas? This seems to be a pretty simple install. No idea why it keeps bombing.

0 Kudos
idata
Employee
2,663 Views

Rob, I might be stating the obvious here (as usual), but are you sure that both, the user installing the SCS addon as well as the AltirisService user have got the permissions they need?

I think the useraccount running SCS has to be a local admin (at least). If that's the case, check whether the AltirisService user has got permissions on the SCS database. (You should be able to see this using the MSFT SQL server manager or some tool like that.)

If that seems ok as well, check the scs-Users table and see whether AltirisService is in there as an EnterpriseAdmin.

I remember having the same error (with the SCS-Server for SMS) at some point, but can't remember how I solved it

Alex

0 Kudos
idata
Employee
2,663 Views

Alex, I don't know for sure what permissions are needed where, I agree with you that it seems some permission is wrong.

When I check the database entries, my account and the Altiris service are both listed as CSR_SYSTEM. In the Roles table CSR_SYSTEM is listed as Enterprise Administrator. And the Altiris Service is a local admin on the machine and I even set it to be the dbo on the IntelAMT database but that didn' t work either.

Maybe you could submit to hypnosis and we could recall that memory of how you fixed it? ?:|

0 Kudos
JoshHilliker
Employee
2,663 Views

Rob. check out the info from the last post from ryan.. if this works please let us know.

0 Kudos
idata
Employee
2,663 Views

Today we spent some time with Altiris 3rd level support. Tomorrow we are resuming the installation with the below resolution attempts. We also go the 104 error when trying to complete the manual SCS install under the Altiris Service account shown above. I will update again tomorrow.

.Troubleshooting with Altiris:

  • Deleted the Intel AMT Database

  • Deleted the Altiris Components needed for AMT hosts.

  • Reinstalled under Altiris Service account instead of user admin account.

After 10 minutes the Altiris silent install fails showing the SCS installed failed. Inside the _scsinstall.log file the contents show...

InstallShield Silent

Version=v7.00

File=Log File

ResponseResult

ResultCode=-3

Application

Name=Intel® Active Management Technology Setup and Configuration Service

Version=3.0.2.6.1

Company=Intel

Lang=0009

The following message may be seen in the Setup.log file when installing a package silently using an .ISS file and a locked file is encountered:

ResultCode -3

Meaning, 'Required data not found in Setup.iss file.'

Altiris support confirmed previous case opened with this problem. Tomorrow morning we are going to try the below resolutions with Altiris.

  • Stop IIS service during the Altiris install

  • Close all SQL enterprise console. Customer confirmed he had SQL console during installation.

0 Kudos
Craig_P_Intel
Employee
2,663 Views

Seems like I had this problem when I setup this config earlier this year. I had 3rd level Altiris working with me and it turned out to be a corrupted DB. We removed and readded and we were able to provision.

CMP

0 Kudos
idata
Employee
2,663 Views

I have got one more idea....

How large is the active directory that your are trying to install SCS in? I have seen the SMS-SCS installer hang for up to half an hour when validating users in large (1Million objects+) ADs. This would in turn lead to a timeout of the Altiris installer script.

However the last version I used was SCS 3.0 so I am not sure this problem still exists in the current version.

Alex

0 Kudos
idata
Employee
2,663 Views

Thanks everyone for your input. The OOBMSC console seems to be working now, although it will be some time before I am able to test all the features.

Here are the steps I followed to fix it:

Use Add//Remove Programs to remove OOBM

Run the AMTConfServer.exe tool to remove IntelAMT. Select Yes when prompted to remove database.

Reboot.

Login as Altiris service account

Stop IIS (World Wide Web...)

Run AMTConfServer.exe. Install completed without errors, services started.

Start IIS

Add OOBM back using the Altiris Solution Center

Reboot

Login as Altiris service

Open Configuration > Solutions > OOBM > Provisioning > Users, add my accounts

Logout of server, and verify login from remote workstation with regular account.

Everything is now working in the console. I have the DNS record for ProvisionServer set correctly, however, when I run the DNS test, I get

Resolved "ProvisionServer" IP: 172.27.0.113

Resolved Intel® SCS IP: 192.168.234.235

Where the resolved IP for the SCS is the Dell Remote Access Controller (DRAC) connection on my server. So I'll have to figure out how to fix that next.

Thanks again for all your help.

-Rob

0 Kudos
idata
Employee
2,663 Views

All problem was solved this morning with Altiris 3rd Level support.

In short: Altiris SCS Silent install does not work with SQL Server 2000. Problem was identified using a script called AddLogontoDB.bat script sent by Altiris. Solution was deleting a registry key HKEY_LOCAL_MACHINE>SOFTWARE>INTEL-->AMTCONFSERVER then reinstalling SCS manually using the Altiris service account. Apparently, after performing an SCS uninstall w\Reboot, it doesn't remove every associated key in the registry.

I will post the official fix from Altiris and full details later today. Thanks for all your ideas and help.

0 Kudos
idata
Employee
2,663 Views

The following blog link shows all I know about this issue, and what steps can be used to resolve it.

p-10793 http://communities.intel.com/openport/blogs/proexpert/2007/12/06/quick-guide-out-of-band-console-error-current-user-can-t-view-this-page

I hope to add to it as new details are discovered on this issue.

0 Kudos
Reply