Loading
Inventory server security error

Hi All,

snow agent 6.3.0 installed on win server2012 R2. Manual cli scan and report sending working fine, but auto scheduled sending failed with "security error occurred".

Auto:

2020-01-30T09:52:04+01:00; Trace;        snowagent; message_loop\messageloop.cpp; Client::MessageLoop::Handshake; Handshake started...

 

2020-01-30T09:52:06+01:00; Verbose;        snowagent; http\endpointhandler.cpp; Client::EndPointHandler::SendToFirstAvailableEndPoint; No last known good end point yet

 

2020-01-30T09:52:06+01:00; Trace;        snowagent; win32\winhttpmessagehandler.cpp; `anonymous-namespace'::WinHttpMessageHandler::Send; Sending

 

2020-01-30T09:52:06+01:00; Verbose;        snowagent; win32\winhttpmessagehandler.cpp; `anonymous-namespace'::WinHttpMessageHandler::Send; Contacting server 'https://server1.company.hu./api/client/hello'.

 

2020-01-30T09:52:06+01:00; WARNING;        snowagent; http\configmessagehandler.cpp; Client::ConfigMessageHandler::SendToEndpoint; A http send error occured with endpoint https://server1.company.hu. HTTP send error.: A security error occurred  

 

2020-01-30T09:52:06+01:00; Verbose;        snowagent; http\endpointhandler.cpp; Client::EndPointHandler::TrySendToKnownEndPoints; Endpoint is unreachable

 

2020-01-30T09:52:06+01:00; ERROR;        snowagent; message_loop\messageloop.cpp; Client::MessageLoop::Handshake; Handshake failed. Cannot connect to server. No endpoint can establish a connection to the server.

 

2020-01-30T09:52:06+01:00; Trace;        snowagent; win32\bootconfig.cpp; snow::BootConfig::handler; Message loop, using poll_interval '21600' & poll_variance '300', next run scheduled to: 2020-01-30T14:54:42Z

Manual:

2020-01-30T10:01:37+01:00; Verbose;        snowagent; http\endpointhandler.cpp; Client::EndPointHandler::SendToFirstAvailableEndPoint; Last known good end point is: https://server1.company.hu.

 

2020-01-30T10:01:37+01:00; Trace;        snowagent; win32\winhttpmessagehandler.cpp; `anonymous-namespace'::WinHttpMessageHandler::Send; Sending

 

2020-01-30T10:01:37+01:00; Verbose;        snowagent; win32\winhttpmessagehandler.cpp; `anonymous-namespace'::WinHttpMessageHandler::Send; Contacting server 'https://server1.company.hu/api/receiver/receive'.

 

2020-01-30T10:01:37+01:00; Verbose;        snowagent; http\endpointhandler.cpp; Client::EndPointHandler::SendToFirstAvailableEndPoint; Endpoint (using last known good endpoint) response is valid

 

2020-01-30T10:01:37+01:00; Info;        snowagent; message_loop\messageloop.cpp; Client::MessageLoop::Send; Sent scan result 'result-000001580373849-142719447990272.snowpack' to server.

 

2020-01-30T10:01:41+01:00; Verbose;        snowagent; process\processmanager.cpp; snow::win32::ProcessManager::handle; Process 3844 exited.

The inventory server URL access from browser ok, got back the master server instance message.

Please advice, thanks,

Attila


  • Hi Samuel's points are completely valid, but I'm not sure they will will help because you say that you receive the snowpack file if you run the scan and send commands manually. This would suggest to me that this is a permissions issue. You are probably running the agent manually in an elevated cmd box (ie. as local admin). I'm wondering if the service user that you have assigned to the snow agent service doesn't have enough elevated rights to run on the device and hence it works fine when you do it manually, but not when it's scheduled. Adam
    Expand Post
  • Samuel, Adam, thanks for your help! The browser inventory page test took 30 sec, so I've checked Samuel's second point, but not problem found. Finally I was thinking about the same, as Adam wrote - there should be some certificate difference between manual run and the auto scheduling. I've installed the agent as administrator and import the certificate from browser, so the manual scan and send was ok. But the scheduling uses the Local computer user, so I imported the certificate with mmc gui. Now it's working, problem solved. Thanks again guys, regards Attila
    Expand Post
  • I see 3 possible issues that are good checking first: Check that the endpoint is correct in the agent's config file Check that you have enough licences for Snow Inventory    Check that you do not have a certificate issue ServiceNow  

Related  Product Forums


                     → Flexera One



                      → Snow Atlas



                      → FlexNet Manager



                      → Snow License Manager



                       → App Broker


       Need help finding an answer?


        Ask a Question →


Loading
Inventory server security error