/build/static/layout/Breadcrumb_cap_w.png

KACE Agent version 7.1.62 Problem

I am unable to get the new KACE agent to stay connected or inventory after upgrading to version 7.1.62.  I am seeing this error in the agent log

[2017-05-17.16:37:06][runkbot:KWeb::DownloadUsingCurl ] DownloadFile: 'C:\ProgramData\Dell\KACE\kbots_cache\4-0.xml' error occurred: 'SSL certificate problem: unable to get local issuer certificate' Error Code (60:Peer certificate cannot be authenticated with given CA certificates), url: https://k1000..com/service/kbot_service_notsoap.php?METHOD=getkbot&KUID=2b051522-b5f7-4f65-9947-521da3f12d96&KBOT_ID=4&KBOT_VERSION=0&CLIENT_VERSION=7.1.62

I am unable to determine why this issue is occurring.  

Thanks


[EDIT]: I have discovered that the Verify SSL Certificates was enabled.  As soon as I disabled that they seem to be inventorying again.  I don't know why the agents wouldn't be able to verify the certificate though.  
Asked 6 years ago 4025 views
0 Comments   [ + ] Show comments

Answers (1)

Posted by: AbhayR 6 years ago
Red Belt
3

Endorsed by Nick The Ninja
Is the intermediate SSL certificate uploaded on K1 to complete the certificate chain ?
Comments:
  • I see that option in the settings, but it is not selected... after doing a bit of research I don't think we are using an intermediate certificate. - dsykes 6 years ago
    • 1. Where did you find the verify ssl certificate was enabled?
      2. Is this happening in all clients? - AbhayR 6 years ago
      • I found it enabled here K1000/adminui -> Control Panel -> Agent Settings -> Verify SSL Certificates

        It was happening to all agents. - dsykes 6 years ago
 
This website uses cookies. By continuing to use this site and/or clicking the "Accept" button you are providing consent Quest Software and its affiliates do NOT sell the Personal Data you provide to us either when you register on our websites or when you do business with us. For more information about our Privacy Policy and our data protection efforts, please visit GDPR-HQ