What is the purpose of HotFix 72414 for Security Manager version 6.5.2? (NETIQKB72414)

  • 7772414
  • 22-Jun-2010
  • 28-Oct-2010

Environment

Why Install This Hotfix?

Resolves an Agent Computer Type Issue

This hotfix resolves an issue where you restart an agent computer and the central computer can no longer determine the agent computer type. Before you apply this hotfix, the Infrastructure views in the Security Manager Control Center display the agent type as Unknown for both workstation and server computers and the agent status as Unknown for workstation computers. Security Manager also logs a heartbeat failure event for the agent. After you apply this hotfix, the agent correctly sends the computer type to the central computer. (ENG285997)

Resolves an Issue where the Agent Heartbeats Repeatedly

This hotfix resolves an issue where an agent computer tries to connect to the central computer and the central computer either does not respond or closes the connection. Before you apply this hotfix, the agent ignores the configured heartbeat interval and repeatedly attempts to send a heartbeat to the central computer, potentially using a large amount of processing resources on the agent computer.

This condition can occur when agent authentication is enabled and the central computer does not recognize the agent certificate or when the agent tries to communicate while the central computer is in the process of performing a configuration update.

After you apply this hotfix, when an agent cannot communicate with the central computer, the agent sends subsequent heartbeat attempts based on the configured heartbeat interval. (ENG291763)

 

Situation

This hotfix resolves an issue where you restart an agent computer and the central computer can no longer determine the agent computer type.

This hotfix resolves an issue where an agent computer tries to connect to the central computer and the central computer either does not respond or closes the connection.

Resolution

To install this hotfix on Windows Server 2003 computers:

  1. Log on to the central computer using an account that is a member of the local Administrators group.
  2. Run the SM65200_Hotfix72414.msp file.
  3. Follow the instructions in the setup program until you have finished installing the hotfix.
  4. Repeat Steps 1 through 3 for each central computer in your configuration group.

To install this hotfix on Windows Server 2008 computers:

  1. Log on to the central computer using an account that is a member of the local Administrators group.
  2. Click the Start menu and navigate to the Command Prompt tool.
  3. Right-click Command Prompt and select Run as administrator.
  4. If User Account Control prompts you to confirm, click Yes.
  5. In the command-line interface, type SM65200_Hotfix72414.msp and press Enter.
  6. Follow the instructions in the setup program until you have finished installing the hotfix.
  7. Repeat Steps 1 through 6 for each central computer in your configuration group.

After installing this hotfix on your central computers, you must scan your managed agents to allow Agent Manager to install the hotfix on the agent computers.

To scan all managed Windows agents:

  1. Start the Development Console in the NetIQ Security Manager program group.
  2. In the left pane, expand Security Manager Development Console, and then expand Configuration.
  3. In the left pane, click Central Computers.
  4. On the Action menu, click Scan All Managed Computers.
  5. Click OK.
  6. In the left pane, expand Pending Agents > Installation.
  7. In the right pane, select all agents pending installation.
  8. On the Action menu, click Approve.
  9. Click OK.
  10. In the left pane, click Central Computers.
  11. On the Action menu, click Scan All Managed Computers.
  12. Click OK.
  13. On the Action menu, click Refresh until Security Manager finishes scanning managed computers.
  14. Close the Development Console.

If your configuration group includes one or more unmanaged agents, you must also install this hotfix manually on each unmanaged agent computer.

To install this hotfix on all computers with unmanaged agents installed:

  1. Log on to the unmanaged agent computer using an account that is a member of the local Administrators group.
  2. Run the SM65200_ManualAgent_Hotfix72414.msp.
  3. Follow the instructions in the setup program until you have finished installing the hotfix.
  4. Repeat Steps 1 through 3 on each computer with an unmanaged agent installed.

Additional Information

Formerly known as NETIQKB72414

System Requirements

This hotfix requires NetIQ Security Manager 6.5.2.