Troubleshooting Agent Provisioning KACE SMA Client Deployment (WinRM) (4372196)

Listed below are the key areas to investigate when trying to troubleshoot agent provisioning in your network. This guide is for a Windows environment (64-bit only).

An alternative way to install is using the GPO Utility.

For more information on this topic, please see the KACE-SMA Course 2 Installing the KACE SMA Agent-Web-based Training.

Assumptions: 

• Provisioning uses files located on a samba share to do the install; "Enable file sharing" must be checked under Settings | Security Settings | Samba.
• The PC in the provisioning schedule as the target IP is called TARGETPC.
• The KACE SMA hostname/FQDN is the same name that is listed in the provisioning configuration AND in the Network settings.
• An agent token is created.
• A Local Admin credential is created for the devices.
• The IP Range of the devices is known.

1- Check for provisioning support files:
If receiving the error, "The system cannot find the file specified."

• Check for this list of files at \\SMA.ip.or.fqdn\client\agent_provisioning\windows_platform.
  • agent_msi_provision.bat
  • agent_msi_remove.bat
  • ampagent-VERSION-x86.msi
• Check that the above location contains the installed version reported at the below location.
  • Click on Settings | Provisioning | Update Agents 
• To resolve any of the above:
  • Navigate to Settings | Appliance Updates and click on "Check for Update" to verify if a new agent version is available.
  • Navigate back to Settings | Provisioning | Update Agents and verify if a new version is showing advertised with the option to Apply the update. If so, click Apply. This will update the agent files located in the samba share.
  • If no new agent versions are detected and the current Advertised update is missing files, navigate to the support portal to download the agent bundle that matches your server version. Navigate to Settings | Provisioning | Update agents and under Manually Upload Agent Bundle, browse for the file downloaded and click Upload.

2- Check TARGETPC is reachable from the KACE Systems Management Appliance and WinRM is enabled

Follow Microsoft's article on enabling/setting up WinRM.

If receiving the error:

"A WinRM timeout occurred during install. Verify the IP address is correct, WinRM is enabled and the Windows firewall is configured to allow WinRM  connections. The 'MaxTimeoutms' WinRM setting on the target device may also need to be increased."

• To test device is reachable, ping the TARGET PC from the KACE SMA appliance:
  For appliances with Organizations enabled, this is done under the SystemUI.
  For appliances without Organizations enabled, it is done under the AdminUI.
  • Click on Settings | Support.
  • Under Troubleshooting Tools, click on Run diagnostic utilities.
  • Click on the drop-down under Test and select ping.
  • Enter appropriate IP.
  • Click Run Now.
• If ping is successful, verify WinRM is enabled on the TARGETPC