The following error may occur when trying to install the Access Explorer agent or upgrade the agent to the latest version:
"The agent update service reported an error for Managed Host <computername> failed for the following reason:
msiexec.exe /i "C:\Program Files\Dell\Enterprise Reporter\Access Explorer\Agent Management\Agent\Installations\x64\AgentInstaller_x64.msi" /lv! logname.log
In the log look for
IFXAPP: INFO: ENTER: DriverPackageInstallW
DIFXAPP: INFO: BWFSDrv.inf: checking signature with catalog 'C:\Program Files\Dell\Enterprise Reporter\Agent Service\BWFSDrv.cat' ...
DIFXAPP: ERROR: Signature verification failed while checking integrity of driver package 'BWFSDrv.inf' ('C:\Program Files\Dell\Enterprise Reporter\Agent Service\BWFSDrv.inf'). (Error code 0x800B0109: A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider.)
DIFXAPP: INFO: Successfully removed '{6418D405-7021-4E04-B520-6F140859BC41}' from reference list of driver store entry ''
DIFXAPP: INFO: RETURN: DriverPackageInstallW (0x800B0100)
DIFXAPP: ERROR: encountered while installing driver package 'C:\Program Files\Dell\Enterprise Reporter\Agent Service\BWFSDrv.inf'
DIFXAPP: ERROR: InstallDriverPackages failed with error 0x800B0100
DIFXAPP: RETURN: InstallDriverPackages() 2148204800 (0x800B0100)
CustomAction MsiInstallDrivers returned actual error code 1603 (note this may not be 100% accurate if translation happened inside sandbox)
Validation of the digital signature used to sign the installation files fails due to the managed host not having the most recent updates to the root certificates.
Trusted Root Certification Authorities - Certificates need to have the following certificate - Verisign Class 3 Public Primary Certification Authority - G5Use Windows update to download and install the most recent updates for the root certificates.
When the Access Explorer Agent is installed it creates a new certificate. The Certificate is called Verisign Class 3 Public Primary Certification Authority - G5" and is installed to Trusted Root Certification Authorities - Certificates
On the server you are attempting to install the agent to, you can manually import the certificate from another server.
Open MMC and add in Certificates
Choose local server and then expand Trusted Root Certification Authorities - Certificates
You can import the certificate manually from another server, the Access Explorer Agent installation will then succeed from the Configuration Manager.
The cause is most likely a Group Policy in place denying access to update certificates.
Please note: If the Managed Host is 2003 or older, Microsoft no longer provides updates for the root certificates and the host cannot be locally managed. For any machines that are 2003 or older, use the Remotely Manged option to install the agent on a different machine and still be able to monitor the target.
© 2024 Quest Software Inc. ALL RIGHTS RESERVED. Feedback Terms of Use Privacy Cookie Preference Center