Environment
Novell ZENworks 11 Configuration Management Remote Management
Novell ZENworks 10 Configuration Management Remote Management
Situation
Unable to remotely manage 64 bit workstations after registering to a zone different than the zone the agent was installed from.
Error on the device initiating the remote control:
The managed device was unable to initialize Novell Encryption schema for the session. Ensure that the managed device is UTC time synchronized with this system. If the problem persists, contact Novell Technical Services
Resolution
The CASubject registry key must be populated correctly on 64 bit devices in order to remotely manage them.
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Novell\ZCM
A ZCM bundle can be created to push out the correct registry key entry.
The subject can be verified from the CA stored in certmgr.msc Trusted Root Certification Authorities | Certificates. Go to the properties and details to verify the certificate subject.
Status
Reported to EngineeringAdditional Information
A fresh install of the ZCM agent writes the CASubject registry key to the following location:
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Novell\ZCM
Registering to a different zone writes the CASubject registry key to a location only used by 32 bit machines:
HKEY_LOCAL_MACHINE\SOFTWARE\Novell\ZCM