Produtos de gerenciamento de sistemas de endpoint KACE

Troubleshooting Agents That Are Not Checking In

This document is for Agents on Windows.

This document describes and approach to determining what is wrong with an agent that is not able to check-in. Apart from the steps in this document there may still be issues with the agent that are preventing it from checking-in. However, this approach will also help to rule out the common symptoms and issues surrounding check-in.

The most common reasons that your agent may not be able to check-in can be grouped into these areas:

5.3

Written for:
KBOX version: 5.3.45497
Agent version: 5.3.47173 (windows)

Installation Problems

  • In the services control panel the Dell Kace Agent should be started and running.
  • There should be a single process running when the agent is idle(see task manager with all processes by all users turned on):
    • AMPAgent.exe - runs under the SYSTEM user
  • if you run a netstat -nao | find /I "52230" output you will see a process with an ID matching the ID of AMPAgent.exe that is listening on 0:52230
  • In add/remove programs list you will see a Dell Kace Agent entry
  • In HKLM\Software\<32-bitnode>\Dell\Kace you will see the KUID entries. MachineID may be blank or not
  • Value for HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon will be KusrInit.exe
  • config files and log are at: C:\Users\All Users\Dell\KACE
  • binaries are at: c:\program files\dell\kace (32-bit program files)

Connectivity / Networking problems

In 5.3 an agent establishes a connection with the server based on the host name and port number that you have specified in the network settings of your KBOX. If you have installed the agent from the kbox (i.e. using either the auto-Agent update from a previous version or Agent Provisioning) then these settings will be inherited from your KBOX network settings.

You should first check the network settings on your box. They should look like this document "Setting your KBOX Web Server Name"

You can determine if the agent cannot connect with the following tests:

  • Check your agent communication window Settings->KBOX Agent->Agent Settings and make sure that the setting IS NOT 12:00am to 12:00 . That means 0 minutes. If you want 24 hours then specify 12:00am to 12:00am (+1day). Note that in 5.0 we did not read this setting so it may have "worked" before and "stopped working".
  • turning on debugging on the agent (http://www.kace.com/support/customer/faq/index.php?action=artikel&cat=2&id=519). The resulting logs are human readable. You will see errors early in the log showing connection attempts failing
  • From the server side there is a log called the "access log". A client that is not able to connect will have no entries in the access log. If you know the IP address of the PC that is having trouble then you can search this log for that IP address. A client that is not able to connect will have no entries in the access log.

If after looking at that information you suspect that the agent cannot connect then you should check the following:

  • Open the amp.conf file in a text editor and check the entries for the servernames and ports. For most customers these values will look something like this:
    ...
    host=kbox
    log=amp.log
    lasthost=kbox
    serverversion=5.3.45497
    appliance=k1000
    ampport=52230
    ampurl=http://kbox:52230
    webport=80
    weburl=http://kbox
    rto=20
    wto=20
    crto=10
    pl=pluginDesktopAlerts,pluginPatching,pluginRunProcess,pluginWeb
    companyname=Dell | Kace : John Doe
    splashtext=Dell KACE Systems Management Appliance is verifying your PC Configuration and managing software updates.      Please Wait...
    
    
    
  • TIP: if you have a working agent then compare the files between the two machines
  • Some tests to try if the agent still cannot connect
    • Ping test: Can you ping the KBOX at the list host name / IP address. Machines that are on different subnets might have different results. Machines on VPN / WAN may have different results. Make sure you are comparing apples to apples. e.g. ping kbox.yourcompany.com
    • Telnet Test: Try telnetting to the kbox on the hostname and port number you have specified. A successful telnet test results in a blank screen and does not give you an error message. E.g. telnet kbox.yourcompany.com 80 or telnet kbox.yourcompany.com 52230. Both of those tests should be successful. E.g of a successful test to 192.168.2.122
    • Web Browser Test: You should be able to open a web browser and browse to http;//kbox.yourcompany.com:80 and see the user portal
    • Disable firewalls: Turn off any firewall software on the PC (e.g. Windows Firewall). A local firewall may be blocking the port / application. Turning it off for a test would demonstrate this. It is possible for Windows firewall to block the kbox agent but not block the tests above.
    • Relocation Test: Put a test PC on the same hub /switch with the kbox and try the above again. This will eliminate any intermediate gateways, etc from being the problem and create a simpler environment to troubleshoot.

Note: If anything needs correcting in the amp.conf file then I would just reinstall: uninstall, delete the amp.conf file, reinstall.

SSL considerations

It is not the default but if you are now using SSL....
If you cannot get to the secure website of your kbox using the host value shown in amp.conf without a security exception then neither can the agent. Make sure that you have not made any exemptions in the browser -- these exemptions will not be allowed by the agent.

The agent will try https first even if it is configured for http on port 80. If it cannot find an answer on https (443) then it will try http (80). If it gets an error on 443 then it will not try 80. Make sure that no proxy server, etc is responding on 443.

Task priority on the KBOX (ie KBOX is busy doing other things)

On the server side:

When an Agent wants to do something it establishes what is called an AMP connection with the kbox (or uses it's already established connection) on port 52230. An agent that is already connected to the server will show a green light icon () beside the machine name in inventory. If you open the detail record for this machine then it will tell you the time that is has been "connected since". Note: this is different then the last time that it checked in/last sync.

An agent that wants to do an inventory will establish an AMP connection and then ask the KBOX to do an inventory. Depending on how busy the kbox is it may nor may not be able to process that inventory right away. If you know the machine name of the PC that is trying to connect then you can do the following:

  1. Go to Settings->Support->Troubleshooting Tools->Click on "See status of KBOX Agent tasks" (on a 1200 box this is in the "system" organization). This will show a list of the "in progress" tasks.
  2. If you see the machine that you are looking for in this list then it is currently doing something. If the task type is "inventory" or "KBOT-ORGX-2" then it is checking-in. This should only take a few minutes. If it extends into 30 minutes or more then you may have a problem.

If you do not see the machine then:

  1. Choose the "All tasks" from the drop-down.
  2. Serch on the machine name that you want to find
  3. If you can find the machine in this list but not in the other then that means the KBOX is waiting to finish other tasks first. You must wait. You can try to do a "force inventory update" from the detail view of that machine's inventory record. This might work because a force check-in has a higher priority then regular inventory requests.

If this PC has a new install/re-install of the agent then this may not work. Instead you will need to search for the "bootstrap" request of the agent. To search for the bootstrap request do the same as above except the machine name will be [Text Missing]. If you do not see that in the "in progess" list then you can use the drop-down list and choose tasks of type "bootstrap". If you still do not see it then there is a different problem. A bootstrap task looks like this

If the individual tasks on the other machines take a long time to complete then you may have some other issues with your KBOX / agents. Please call technical support.

On the agent side:

On the agent side you can try to force a bootstrap by going to the binaries directory and running runkbot 4 0. While this runs you should see kinventory.exe run for part of the time. At the end of it you should have a machine in inventory and the kbots 4,5,6 in c:\users\all users\dell\kace\kbots_cache and perhaps other kbots.

Other issues

If you have come to this point and are still unable to connect then you should try to restart the services on the agent PC, reboot the PC and reboot your kbox (if possible).

If that is unsuccessful then at this point you should call technical support. You should have documented evidence of following the troubleshooting steps above including the debug logs from the PC. Also be prepared for support to want to tether your box (see http://www.kace.com/support/customer/faq/index.php?action=artikel&cat=1&id=699)


5.1

Written for
KBOX version: 5.1.31327
Agent version: 5.1.31311 (windows)

Installation Problems

To eliminate any installation problem please check the following:
  • A complete KBOX installation should have the following files in the c:\program files\kace\kbox directory. (see bottom of this doc)
  • All of the dll's and exe's should have the same major and minor version. That version on Windows is 5.1.31311 You can check that by right-clicking one of the exe's and dll's: choose properties and then check the version tab.
  • The install.log should end with:
    • 5.1:
[]Installing and starting Dell KACE Management Service.
[]  Finished.
  • In the services control panel The KBOX SMMP Management Service should be started and running.
  • There should be three processes running (as shown in the process list of task manager): KBOXSMMPService.exe and KBOXUserExtension.exe and watchdog.exe All should be running under the SYSTEM account except watchdog.exe which runs under EACH user context.
  • It wouldn't hurt to do a reinstall.

Connectivity / Networking problems

In 5.1 an agent establishes a connection with the server based on the host name and port number that you have specified in the network settings of your KBOX. If you have installed the agent from the kbox (i.e. using either the auto-Agent update from a previous version or Agent Provisioning) then these settings will be inherited from your KBOX network settings.

You should first check the network settings on your box. They should look like this document "Setting your KBOX Web Server Name"

You can determine if the agent cannot connect with the following tests:

  • Check your agent communication window Settings->KBOX Agent->Agent Settings and make sure that the setting IS NOT 12:00am to 12:00 . That means 0 minutes. If you want 24 hours then specify 12:00am to 12:00am (+1day). Note that in 5.0 we did not read this setting so it may have "worked" before and "stopped working".
  • turning on debugging on the agent (http://www.kace.com/support/customer/faq/index.php?action=artikel&cat=2&id=519). The resulting logs are human readable. You will see errors early in the log showing connection attempts failing
  • From the server side there is a log called the "access log". A client that is not able to connect will have no entries in the access log. If you know the IP address of the PC that is having trouble then you can search this log for that IP address. A client that is not able to connect will have no entries in the access log.

If after looking at that information you suspect that the agent cannot connect then you should check the following:

  • Open the smmp.conf file in a text editor and check the entries for the servernames and ports. For most customers these values will look something like this:
    ...
    kboxver=5.1.31237
    rto=20
    ampurl=http://kbox.yourdomain.com:52230
    splashtext=KACE Training and Support is verifying your PC Configuration and managing software updates.      Please Wait...\r\n\r\nDON&apos;T PANIC!
    pinginterval=900
    weburl=http://kbox.yourdomain.com
    companyname=Yourcompany
    pl=pluginDesktopAlerts,pluginPatching,pluginWeb,pluginRunProcess
    log=SMMP.log
    host=kbox.yourdomain.com
    ampport=52230
    lasthost=kbox.yourdomain.com
    crto=10
    wto=20
    webport=80
  • TIP: if you have a working agent then compare the files between the two machines
  • Some tests to try if the agent still cannot connect
    • Ping test: Can you ping the KBOX at the list host name / IP address. Machines that are on different subnets might have different results. Machines on VPN / WAN may have different results. Make sure you are comparing apples to apples. e.g. ping kbox.yourcompany.com
    • Telnet Test: Try telnetting to the kbox on the hostname and port number you have specified. A successful telnet test results in a blank screen and does not give you an error message. E.g. telnet kbox.yourcompany.com 80 or telnet kbox.yourcompany.com 52230. Both of those tests should be successful. E.g of a successful test to 192.168.2.122
    • Web Browser Test: You should be able to open a web browser and browse to http;//kbox.yourcompany.com:80 and see the user portal
    • Disable firewalls: Turn off any firewall software on the PC (e.g. Windows Firewall). A local firewall may be blocking the port / application. Turning it off for a test would demonstrate this. It is possible for Windows firewall to block the kbox agent but not block the tests above.
    • Relocation Test: Put a test PC on the same hub /switch with the kbox and try the above again. This will eliminate any intermediate gateways, etc from being the problem and create a simpler environment to troubleshoot.

Note: If anything needs correcting in the smmp.conf file then I would just reinstall: uninstall, delete the smmp.conf file, reinstall.

SSL considerations

Prior to 5.1, If you are using SSL port 443 only and have turned off or blocked port 80 then the agents will not be able to connect unless you specifically tell them to use SSL. You can tell them to use SSL by doing one of these
  1. reinstalling them manually using these commands:
    \\kbox\client\agent_provisioning\windows_platform\agent_remove.bat 1
    \\kbox\client\agent_provisioning\windows\platform\agent_provision.bat kbox client kbox.company.com 1 1
  2. modifying the smmp.conf directly as follows and then restarting the KBOX services:
    • Config.xml
      ...
       <ServerUrlPrefix>https</ServerUrlPrefix>
      
      <ServerPort>80</ServerPort>
      <ListenPort>52230</ListenPort>
      ...
    • smmp.conf
      ...
      ssl=true
      ...

In 5.1 the agent is smart enough to retry 80 or 443 using cache information if it cannot find the server.

Task priority on the KBOX (ie KBOX is busy doing other things)

When an Agent wants to do something it establishes what is called an AMP connection with the kbox (or uses it's already established connection) on port 52230. An agent that is already connected to the server will show a green light icon () beside the machine name in inventory. If you open the detail record for this machine then it will tell you the time that is has been "connected since". Note: this is different then the last time that it checked in/last sync.

An agent that wants to do an inventory will establish an AMP connection and then ask the KBOX to do an inventory. Depending on how busy the kbox is it may nor may not be able to process that inventory right away. If you know the machine name of the PC that is trying to connect then you can do the following:

  1. Go to Settings->Support->Troubleshooting Tools->Click on "See status of KBOX Agent tasks" (on a 1200 box this is in the "system" organization). This will show a list of the "in progress" tasks.
  2. If you see the machine that you are looking for in this list then it is currently doing something. If the task type is "inventory" or "KBOT-ORGX-2" then it is checking-in. This should only take a few minutes. If it extends into 30 minutes or more then you may have a problem.

If you do not see the machine then:

  1. Choose the "All tasks" from the drop-down.
  2. Serch on the machine name that you want to find
  3. If you can find the machine in this list but not in the other then that means the KBOX is waiting to finish other tasks first. You must wait. You can try to do a "force inventory update" from the detail view of that machine's inventory record. This might work because a force check-in has a higher priority then regular inventory requests.

If this PC has a new install/re-install of the agent then this may not work. Instead you will need to search for the "bootstrap" request of the agent. To search for the bootstrap request do the same as above except the machine name will be [Text Missing]. If you do not see that in the "in progess" list then you can use the drop-down list and choose tasks of type "bootstrap". If you still do not see it then there is a different problem. A bootstrap task looks like this

If the tasks on the other machines take a long time to complete then you may have some other issues with your KBOX / agents. Please call technical support.

Mixed Environments / Mixed Client versions

If you have clients that are pre-5.0 then you can run into problems. You must upgrade your old clients.

Other issues

If you have come to this point and are still unable to connect then you should try to restart the services on the agent PC, reboot the PC and reboot your kbox (if possible).

If that is unsuccessful then at this point you should call technical support. You should have documented evidence of following the troubleshooting steps above including the debug logs from the PC. Also be prepared for support to want to tether your box (see http://www.kace.com/support/customer/faq/index.php?action=artikel&cat=1&id=699)

Appendix: List of 5.1.31311 files on Windows OS

C:\Program Files\KACE\KBOX\agent.log
C:\Program Files\KACE\KBOX\BackgroundCopyManager.dll
C:\Program Files\KACE\KBOX\BITS.dll
C:\Program Files\KACE\KBOX\CheckVersion.exe
C:\Program Files\KACE\KBOX\debug.log
C:\Program Files\KACE\KBOX\downloads
C:\Program Files\KACE\KBOX\es-ES
C:\Program Files\KACE\KBOX\EXIT_CODE_LIST
C:\Program Files\KACE\KBOX\ICSharpCode.SharpZipLib.dll
C:\Program Files\KACE\KBOX\install.log
C:\Program Files\KACE\KBOX\KAgentCommon.dll
C:\Program Files\KACE\KBOX\KBCLIENT_DEBUG
C:\Program Files\KACE\KBOX\Kbots.xsd
C:\Program Files\KACE\KBOX\KBotsEngine.dll
C:\Program Files\KACE\KBOX\kbots_cache
C:\Program Files\KACE\KBOX\KBOXClient.exe
C:\Program Files\KACE\KBOX\KBOXSMMPService.exe
C:\Program Files\KACE\KBOX\KBOXUserExtension.exe
C:\Program Files\KACE\KBOX\KBScriptRunner.exe
C:\Program Files\KACE\KBOX\kbxlog.txt
C:\Program Files\KACE\KBOX\kEvents.db
C:\Program Files\KACE\KBOX\kinstaller.exe
C:\Program Files\KACE\KBOX\kinstaller.exe.config
C:\Program Files\KACE\KBOX\kinstaller.exe.manifest
C:\Program Files\KACE\KBOX\kinstaller_kuid
C:\Program Files\KACE\KBOX\KLocalExecutionState.dat
C:\Program Files\KACE\KBOX\kpatch.exe
C:\Program Files\KACE\KBOX\KScriptWin.exe
C:\Program Files\KACE\KBOX\KUpdater.exe
C:\Program Files\KACE\KBOX\kupdater.log
C:\Program Files\KACE\KBOX\kuptime.dll
C:\Program Files\KACE\KBOX\packages
C:\Program Files\KACE\KBOX\pluginDesktopAlerts.dll
C:\Program Files\KACE\KBOX\pluginDesktopAlerts.log
C:\Program Files\KACE\KBOX\pluginPatching.dll
C:\Program Files\KACE\KBOX\pluginPatching.log
C:\Program Files\KACE\KBOX\pluginRunProcess.dll
C:\Program Files\KACE\KBOX\pluginRunProcess.log
C:\Program Files\KACE\KBOX\pluginWeb.dll
C:\Program Files\KACE\KBOX\pluginWeb.log
C:\Program Files\KACE\KBOX\runkbot.exe
C:\Program Files\KACE\KBOX\SMMP.conf
C:\Program Files\KACE\KBOX\SMMP.log
C:\Program Files\KACE\KBOX\SMMP1.log
C:\Program Files\KACE\KBOX\SMMPKickstart.exe
C:\Program Files\KACE\KBOX\SMMP_CONNECTED
C:\Program Files\KACE\KBOX\SMMP_SERVICE_STARTED
C:\Program Files\KACE\KBOX\es-ES\KBOXClient.resources.dll
C:\Program Files\KACE\KBOX\es-ES\kinstaller.resources.dll
C:\Program Files\KACE\KBOX\kbots_cache\2-1247147724.xml
C:\Program Files\KACE\KBOX\kbots_cache\3-1247147724.xml
C:\Program Files\KACE\KBOX\kbots_cache\agent.log
C:\Program Files\KACE\KBOX\kbots_cache\kbots.xml
C:\Program Files\KACE\KBOX\kbots_cache\kbots_cache
C:\Program Files\KACE\KBOX\kbots_cache\kbots_cache\3-1275400432.xml
C:\Program Files\KACE\KBOX\packages\kbots

Atualizado em: 12/10/2011