Agent devices suddenly disconnect from KACE SMA and are unable to reconnect on their own after an agent certificate update.
The konea.log will show the following error when agent tries to reconnect:
tls: failed to verify certificate: x509: certificate signed by unknown authority
This issue has been identified as defect ID K1A-4202 where the agent fails to properly challenge and rotate the certificate hence causing devices to disconnect. This issue is resolved by updating the KACE SMA agent to the latest 14.0.99 and 14.1.22 versions.
For a complete resolution, it is strongly recommended for all customers to apply latest cumulative server updates for KACE SMA 14.0 (14.0.345 patch 7) and 14.1 (14.1.106 patch 7) and KACE SMA agent update 14.0.99 and KACE SMA Agent update 14.1.22 as soon as possible. Failure to apply the patch in time could result in all agent being disconnected from the appliance.
If already affected by the issue described, where agents have disconnected and fail to reconnect to the SMA on their own, please contact support for further assistance.
