Arellia Symantec Management Platform 7.5+ Compatibility Pack Release Notes

Background

Arellia have released a compatibility pack that allows Arellia 7.1 SP3 products to function correctly on Symantec Management Platform (SMP) versions 7.5 and 7.6.

The compatibility pack is supported in either of the following scenarios:

Pre-existing Arellia Installation on Symantec Management Platform 7.1

In this scenario you have a Arellia 7.1 SP3 installation on SMP 7.1 and wish to upgrade to SMP 7.6. In this case you can install the compatibility pack either before or after the installation of SMP 7.6.

New Symantec Management Platform 7.6 installation

In this scenario you have created a new installation of SMP 7.6 and wish to install Arellia 7.1 SP3 products. In this case you must install the compatibility pack before the Arellia installation.

NOTE: The compatibility pack is only intended to be installed on Arellia 7.1 SP3. If you are running an earlier version of Arellia products you MUST upgrade before continuing.

Installation Steps

  • Obtain a copy of the compatibility pack by contacting Arellia support.
  • Install the compatibility pack MSI onto the SMP server
  • Restart IIS and all Altiris Services (make sure you restart AtrsHost)

Known Issues

The compatibility pack has addressed as many breakages introduced by SMP 7.6 as possible. Unfortunately there are some platform breaks that still must be addressed by Symantec. We are actively working with Symantec development to get these addressed as soon as possible.

Several Arellia filter types are no longer included in the Delta Collection Update schedule
  • CPE Filters
  • Security Rating Filters
  • Package Contents Filters
  • Reference System Filters
  • All Executables Discovered in Last x Filters

To update these filters you will need to manually update membership in the Arellia console. Symantec have acknowledged this defect and will be delivering a fix in the upcoming SMP 7.5 Hotfix 3 release which is scheduled for January 2014.

Events sent by Cloud Enabled Management Agents are not processed on the server

Cloud Enabled Management (CEM) functionality is not in the current Symantec Management Platform SDK and therefore cannot be supported by Arellia. Some of the security changes made in 7.5 to support CEM have meant that the Arellia dataloader cannot process events that originate from a CEM agent.

The error in the logs is similar to the following:

ClientMessageInventoryProcessor.ProcessClientMessage: The caller ('NS Agent Identity') does not have one or more of the specified permissions on the specified items.

Message dispatch failed for: from: d1c5dbb8-703a-4748-b09c-fd219a4398ee, to: 'Local User Inventory Policy' (35f3fe35-4f02-4576-965f-bd0106816a8e)
Altiris.NS.Exceptions.AeXSecurityException (Altiris.NS): The caller ('NS Agent Identity') does not have one or more of the specified permissions on the specified items.
   at Altiris.NS.Security.ItemPermission.Demand()
   at Arellia.SMP.Resource.ResourceDataTable2.Arellia.SMP.Resource.IResourceDataTable2.Load()
   at Arellia.SMP.LocalSecurity.DataClasses.UserAccountPasswordChangeDataTable.NotifyChanges(DataTable dtChanged)
   at Arellia.SMP.Resource.ResourceDataTable2.InternalSave()
   at Arellia.SMP.Resource.ResourceDataTable2.Altiris.Resource.IResourceDataTable.Save()
   at Arellia.SMP.Resource.ResourceDataTable2.SaveWithRetry(IResourceDataTable2 resourceDataTable)
   at Arellia.SMP.Resource.ResourceDataLoader.Save()
Filters that are not in use are updated as part of the Delta Collection Update schedule

The SMP Delta Update Collection schedule incorrectly identifies several Arellia filters as candidates for delta processing, even though the filters are not used by an active policy. This can become an issue in large-scale environments where the 'All Unclassified Applications' filter contains a large number of resources and requires several minutes of CPU processing.

Refer to KB article All Unclassified Applications filter being updated as part of Delta Collection Update schedule for steps on how to prevent SMP from updating these collections during the delta update schedule.


This KB article will be updated as we receive updates from Symantec Engineering.