For more details about these vulnerabilities please refer to: ... KACE has determined that the vulnerability described under CVE-2024-7589 impacts version 14.0 and 14.1 of the KACE SMA appliance.
When an environment needs to be upgraded several server (appliance) versions and it is not possible to address the agents outside of the SMA, it will be necessary to carefully consider the exact upgrade path to keep the agents updated enough to communicate with the new server (appliance) version for agent upgrades.
Organizations are logical instances of a KACE SMA that run on a single appliance. ... Each organization is supported by its own database, and you manage each organization’s inventory and other components separately.
The KACE SMA Agent uses an encrypted TLS session to validate the integrity of the connection it makes to the KACE Systems Management Appliance. ... This trusted connection is established the first time the agent connects to the Systems Management Appliance and ensures that all subsequent connections are being made to the same system.
There is a possible issue that can happen which fills up the /var partition on the SMA with internal system emails. ... This is caused by defect ID: K1-35436 For an immediate resolution, upgrading to 14.0 will clear out the /var partition and prevent the issue from happening again, as this issue is solved on the 14.0 release.
The system monitoring reports that the K1000 Appliance /proc is 100% full. ... K1000 Appliance is running on FreeBSD and it is normal for the /proc (procfs) to be 100% full. ... It is not a true file system; Proc is used for processes.
The KACE Systems Management Appliance (SMA) Beta program is invaluable in making sure that we are shipping the highest quality product we possibly can. ... <p>We are no longer accepting beta candidates for the 14.0 release, but we will update this KB with more information for future betas.</p>
This release of the KACE Systems Management Appliance includes major features on the User Interface and Agent infrastructure. ... The minimum version for upgrade is 13.2.182. ... Please see the upgrade path if on an earlier version.
Can I select thin provisioning when installing the OVF template? <p>Hypervisors typically allow for either Thick or Thin Provisioning. ... Thick provisioning allocate all the drive space at the time the virtual discs are created.
This was to ensure the latest security fixes were enabled in the KACE appliance. ... VMware does not officially support FreeBSD v14.0 on their ESX/ESXi versions below 8.0. ... In order to receive official support for FreeBSD v14.x in ESX/ESXi, you must upgrade to v8.0 or higher.
URLs setup in Service Desk | Configuration | User Console Home Page Links, when trying to input a URL that is too long and has more than 100 characters it will cut the URL until it reach the 100 characters.
Azure SAML Authentication claims are not customizable when are set up through a regular App Registration. ... <p>If your Office license allows it, an Enterprise Application for SAML authentication can be set up, so more options in terms of claim customization are within reach.</p> <p><span>The steps listed below will allow you to enable SAML on the Kace SMA and configure it to work with Azure as the IdP through an Enterprise Application registration.
Warranty support on the appliance hardware is available for up to five years from the date of purchase. ... The warranty support can be annually renewed once the warranty support term ends for a maximum of five years from the original date of purchase.
Turning on SSL/TLS will enable it for both the user portal as well as for the Admin/System UIs. ... The SMA can be reached via port 80 by default, but can be configured for port 443 only. ... Ensure the KACE SMA web server name has the same domain name suffix as specified in the domain field in System | Settings | Network Settings (i.e. web server name is support.kace.com and domain name is kace.com)
Created a new Service Desk queue on K1000 SMA and configured using Microsoft Office365 OAuth credentials for the queue inbound Emails. ... Emails are being send to K1000 SMA Service Desk queue for Tickets creation, but instead the Ticket Emails are found to be inside the Office365 Inbox and not being sent to the Service Desk queue.
During appliance version upgrades, there might be a limitation on the hardware and might require a migration before upgrading the appliance. ... Users may request what generation of appliance they are currently having.
When working with tickets, it is possible to change ticket fields via email using variables. ... These email variables are available for most fields but can require specific formatting to apply as intended.
Access Control Lists (ACLs) are a fundamental aspect of network security and play a crucial role in controlling access to network resources. ... An ACL is a set of rules that define what IP addresses are permitted or denied to access the SMA.
List of troubleshooting steps if you are unable to receive emails sent by the SMA to your inbox. ... The cause may vary, depending on the scenario, here are some suggestions. ... The SMA has it's own internal SMTP server that can be used for delivery or you can specify that it use your On Premises SMTP server, Office 365/Gmail, etc..
When do the LDAP filters get evaluated? ... LDAP Machine Labels will apply to computers at check‐in. ... LDAP User Labels will be applied to users on login or LDAP import. ... How to setup the filters
You can configure appliance network settings to meet the changing needs of your environment. ... For the virtual and physical versions of the KACE Systems Management Appliance (SMA), network settings are configured during the initial login to the Command Line Console, which uses the konfig/konfig credentials.
However, this upgrade to MariaDB has resulted in adjustments required for reports. ... <p>When opening the report to Edit it, the following red banner error can be noticed:</p> ... <p><img src="https://prod-support-images-cfm.s3.amazonaws.com/KB_kA06R000000HMHqSAO_reporterror.png"></img></p>
DNS records need change, or SSL settings need reviewing. ... Make sure that in your DNS records the CNAME redirects to the fully qualified domain name instead of just the hostname of your K1000. ... Alternatively, delete the CNAME record and create a new host A static record for kace.
When we refer to supported vs unsupported in this case, we are not referring to the hardware support contract, but rather if the specific hardware is supported with a specific version of the SMA.
Attempting to send logs to Support via an email reply fails or results in an error message about size. ... Size is often capped for attachments larger than 10mb within emails. ... For logs which exceed the maximum sizes to send in email, it is also possible to directly upload the logs to your service request on the Quest support site.
© 2025 Quest Software Inc. ALL RIGHTS RESERVED. Terms of Use Privacy Cookie Preference Center