This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Windows PC not reporting back

On a network of twenty odd PCs, four are not reporting back to Enterprise Console, though Sophos appears to be installed and updating. All four are Windows 7, but other Windows 7 PCs are fine.  Looking at the client logs, this repeats every 10 minutes (on the one I looked at):

13.05.2013 08:09:35 0A94 I Getting parent router IOR from 192.168.2.2:8192
13.05.2013 08:09:58 0A94 I This computer is part of the domain F2
13.05.2013 08:09:58 0A94 I Getting parent router IOR from fe80::eca2:a2ea:9ff2:ab08:8192
13.05.2013 08:09:58 0A94 E ACE_INET_Addr::ACE_INET_Addr: fe80::eca2:a2ea:9ff2:ab08: The requested name is valid, but no data of the requested type was found.
13.05.2013 08:09:58 0A94 W Parent address unknown: The requested name is valid, but no data of the requested type was found.  (11004)
13.05.2013 08:09:58 0A94 I Getting parent router IOR from SVR01.fta.local:8192
13.05.2013 08:10:00 0A94 E ACE_INET_Addr::ACE_INET_Addr: SVR01.fta.local: No such host is known.
13.05.2013 08:10:00 0A94 W Parent address unknown: No such host is known.  (11001)
13.05.2013 08:10:00 0A94 I Getting parent router IOR from SVR01:8192
13.05.2013 08:10:00 0A94 I This computer is part of the domain F2
13.05.2013 08:10:00 0A94 I Getting a new router certificate...
13.05.2013 08:10:00 0A94 W SSL connection alert, peer address 10.0.0.2
13.05.2013 08:10:00 0A94 W Cannot verify peer's SSL certificate, unknown CA
13.05.2013 08:10:00 0A94 E Router::ReportInvalidCertificate: Caught Empty IOR string from iiopAddressesInIOR
13.05.2013 08:10:00 0A94 E ACE_SSL (2684|2708) error code: 336134278 - error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
13.05.2013 08:10:00 0A94 W SSL connection alert, peer address 10.0.0.2
13.05.2013 08:10:00 0A94 W Cannot verify peer's SSL certificate, unknown CA
13.05.2013 08:10:00 0A94 E Router::ReportInvalidCertificate: Caught Empty IOR string from iiopAddressesInIOR
13.05.2013 08:10:00 0A94 E ACE_SSL (2684|2708) error code: 336134278 - error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
13.05.2013 08:10:00 0A94 E Router::GetCertificate: Caught CORBA system exception, ID 'IDL:omg.org/CORBA/TRANSIENT:1.0'
OMG minor code (2), described as '*unknown description*', completed = NO
 
13.05.2013 08:10:00 0A94 E Failed to get certificate, retrying in 600 seconds

It seems to object to the security certificate on the server. We have no valid SSL certificate, so that may well be justified, but then why are the others working?

Any ideas?

:40159


This thread was automatically locked due to age.
Parents
  • Hi F2Andy

    Sounds to me like the cac.pem is corrupt.

    Easiest fix should be to uninstall the Remote Management System part of Sophos, remve the folder c:\program files (x86)\sophos\Remote Management System - because the cac.pem and mrinit.conf files will probably get left behind. Remove the folder c:\programdata\sophos\remote management system. Then reinstall Sophos from your CID.

    Hopefully problem solved.

    Matt

    :40171
Reply
  • Hi F2Andy

    Sounds to me like the cac.pem is corrupt.

    Easiest fix should be to uninstall the Remote Management System part of Sophos, remve the folder c:\program files (x86)\sophos\Remote Management System - because the cac.pem and mrinit.conf files will probably get left behind. Remove the folder c:\programdata\sophos\remote management system. Then reinstall Sophos from your CID.

    Hopefully problem solved.

    Matt

    :40171
Children
No Data