Unable to remote control 64 bit workstations after registering to a different zone

  • 7009001
  • 15-Jul-2011
  • 27-Apr-2012

Environment

Novell ZENworks 11 Configuration Management Remote Management
Novell ZENworks 10 Configuration Management Remote Management

Situation

Unable to remotely manage 64 bit workstations after registering to a zone different than the zone the agent was installed from.  
 
Error on the device initiating the remote control:
 
The managed device was unable to initialize Novell Encryption schema for the session.  Ensure that the managed device is UTC time synchronized with this system.  If the problem persists, contact Novell Technical Services

Resolution

The CASubject registry key must be populated correctly on 64 bit devices in order to remotely manage them.
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Novell\ZCM
 
A ZCM bundle can be created to push out the correct registry key entry.
 
The subject can be verified from the CA stored in certmgr.msc  Trusted Root Certification Authorities | Certificates.   Go to the properties and details to verify the certificate subject. 
 

Status

Reported to Engineering

Additional Information

A fresh install of the ZCM agent writes the CASubject registry key to the following location:
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Novell\ZCM
 
Registering to a different zone writes the CASubject registry key to a location only used by 32 bit machines:
HKEY_LOCAL_MACHINE\SOFTWARE\Novell\ZCM