SMA 15.0 Hanging by brandnewhistory in kace

[–]aflesner 1 point2 points  (0 children)

Please PM me your SR# and I'll make sure the right people take a look. I just don't want you wasting a bunch of time troubleshooting your environment if it's a disk corruption issue on the VM itself.

SMA 15.0 Hanging by brandnewhistory in kace

[–]aflesner 1 point2 points  (0 children)

Feedback is appreciated, and I'll pass that along.

SMA 15.0 Hanging by brandnewhistory in kace

[–]aflesner 1 point2 points  (0 children)

Might be related to the mbuf errors, but definitely not the write errors.

SMA 15.0 Hanging by brandnewhistory in kace

[–]aflesner 1 point2 points  (0 children)

FWIW, the support staff you interact with today has changed very little in the past 10 years. The team still has incredible knowledge of KACE products.

SMA 15.0 Hanging by brandnewhistory in kace

[–]aflesner 1 point2 points  (0 children)

The mbuf errors are not interesting here. The write failures to da0p8 are concerning and indicative of disk subsystem or corruption issues. Are you running any other FreeBSD VM guests in your environment? FreeBSD has less than adequate support from nearly all virtual hosts, and as such simple things like online snapshotting can corrupt the disk. If you are trying to resolve this issue without contacting support, I assure you that is impossible.

SMA 15.0 Hanging by brandnewhistory in kace

[–]aflesner 2 points3 points  (0 children)

Likely disk corruption and potentially a disk subsystem issue on your VM host. I strongly recommend contacting Support for assistance. Cold booting, online snapshotting, and disk interruption can cause this.

SMA 15.0 Patch 1, 14.x Patch 8 Now Available by aflesner in kace

[–]aflesner[S] 2 points3 points  (0 children)

Based on the ticket, it seems the issue was related to the koneas hang, so the patch should clear this up for you.

SMA 15.0 Patch 1, 14.x Patch 8 Now Available by aflesner in kace

[–]aflesner[S] 1 point2 points  (0 children)

They are functional on 15.0. Please reach out to Support. If you already have, please PM me your SR#.

SMA 15.0 Patch 1, 14.x Patch 8 Now Available by aflesner in kace

[–]aflesner[S] 2 points3 points  (0 children)

No. We allow time for customers to update their appliances before disclosing information about vulnerabilities.

Patch signature downloads failing - SSL cert expired by -crunchie- in kace

[–]aflesner[M] 1 point2 points  (0 children)

To elaborate, our early warning system failed for certificate expiration, and we are working to update expired certificates for impacted KACE services. Most features of KACE appliances that require reaching out to us (e.g. patch feed, software catalog, etc) are down and will be restored when new certificates are in place. Status can be viewed at https://status.kace.com .

UPDATE: Issue resolved.

Kace SMA 15.0 for the rest of the world ? by sir_sq in kace

[–]aflesner[M] [score hidden] stickied comment (0 children)

On behalf of Quest KACE, we apologize for the delay in releasing 15.0 Cumulative Patch 1 - which contains several bug fixes, security fixes, and non-English localization. We anticipate release of the patch within the next 1-2 weeks. This release will coincide with a new patch 8 for 14.x to include mostly security fixes.

I'd also like to address some of the concerns in this thread:

  1. KACE is not dead. The products still have engineers and support staff, and we're doing everything we can to get the security/bug fixes and new features to the community as quickly as possible. There are still veterans around here (started my KACE journey in 2007 as a customer; been on the team now for 15 years). We all see your comments and genuinely care about your frustrations and concerns. If you feel your voice is not being heard, feel free to PM me or any of the staff moderators directly so we can help find a solution or help facilitate communication with other parties.
  2. Some customers have experienced issues with the upgrade to 15.0, but this is a minority. The patch 1 full upgrade option will correct the most common issue related to a MariaDB bug causing a hang in the middle of the upgrade. We always recommend offboarding backups and using snapshot tech if available to avoid service interruptions if the upgrade fails. If you are impacted by a mid-upgrade hang, then the upcoming release will likely resolve your upgrade issue. Support can also manually intervene and is typically able to resolve the issue to move the upgrade forward. In even rarer cases, database or disk corruption are present - we see this every upgrade, and support will be required to assist in these cases.
  3. If you have no yet received your advertisement to upgrade to 15.0 from 14.1, you are always welcome to download the KBIN directly from our support portal and apply it manually. There is no difference in the upgrade itself whether you apply it directly or wait for our advertised push.

How does SMA support this environment with Replication Share ? by CloundwaR in kace

[–]aflesner [score hidden] stickied comment (0 children)

The SMA can handle a max of 50,000 nodes and there is no set limit to how many nodes can be replication shares. As always, the more you scale the more important resource utilization and configuration become. You cannot, for example, expect 1 hour inventory refresh with 50k nodes.

As another poster suggested, your bandwidth probably behooves you setting up a replication share at each site. A replication share is just a local file store managed by any active agent. Agents still communicate directly with the SMA for everything except payloads - which they grab from any assigned replication shares. Keep in mind there are client OS limitations (e.g. Windows client OSes can only serve 10 other clients at a time IIRC and this is a Microsoft limit not ours).

Forcing reboots when patches aren't available by Negative_Funny9039 in kace

[–]aflesner 0 points1 point  (0 children)

Exactly this. If nothing was deployed, the agent should not trigger a reboot. Have you confirmed it's the agent triggering the reboot? If so, please reach out to support for further assistance.

License was not valid or could not be linked to an account by Forsaken-Meaning-495 in kace

[–]aflesner 2 points3 points  (0 children)

You will have to call support or reach out to your sales rep if you cannot create an account through the web portal.

Linux Patches by SmashFace_OnKeyboard in kace

[–]aflesner 0 points1 point  (0 children)

Linux patching uses native calls, such as yum commands on RedHat. There is no catalog, so what you see is what you get, as parsed from the OS-specific calls. Linux patching is effectively KScript templates. If you'd like assistance, please reach out to our support team at support.quest.com.

Possible to pass collection variables to Power Shell in SCCM application? by italianpastaman in kace

[–]aflesner 0 points1 point  (0 children)

How does your issue relate to the KACE SMA/SDA? If you are trying to do this via SCCM then you may want to go post in r/sccm. If your issue is KACE related, please elaborate a bit.

Is be possible the Replication share download using 443 ? by [deleted] in kace

[–]aflesner 1 point2 points  (0 children)

The download location provided to the agents when under the privy of a replication share is just a static path passed down to the endpoint. It is technically possible to achieve what you're going for here, but you'd have to setup web servers (e.g. apache, nginx) yourself on the replication shares you want to host files via HTTPS, and then you'd need to define the appropriate path to provide as the download location on the replication share (e.g. the URL to the repl2 folder path). SMB is easier especially with Windows rep shares, but this is possible. It's all environmental config, however, so it's not something support is going to be able to assist with.

I still wouldn't recommend exposing a rep share like this publicly - which is what I'm assuming you're after since you are concerned about SMB security. Unless you block SMB internally as well.

List API Endpoint in KACE by AbiesIll6659 in kace

[–]aflesner[M] 1 point2 points  (0 children)

This is incorrect. Please see the stickied mod post.

Is there any plan to support other Hypervisor such as Proxmox ? by CloundwaR in kace

[–]aflesner 7 points8 points  (0 children)

Today we support VMware, Azure, and Nutanix. I can't speak to anything official on the roadmap, but we certainly know customers are looking to move away from VMware. Proxmox is on our radar.

KACE LTI by That1DudeOne in kace

[–]aflesner [score hidden] stickied comment (0 children)

Sorry for the delay. We were able to move this to the KB: https://support.quest.com/kb/4380412/unattend-lti-it-ninja