Agent fails to check in
[2020-06-08.10:08:45][AMPAgent:ConfigLogAll ] KACE Agent version 6.4.522 Mar 15 2016
[2020-06-08.10:08:45][AMPAgent:ConfigLogAll ] Config: debug: false
[2020-06-08.10:08:45][AMPAgent:ConfigLogAll ] Config: config: amp.conf
[2020-06-08.10:08:45][AMPAgent:ConfigLogAll ] Config: host: kace1000
[2020-06-08.10:08:45][AMPAgent:ConfigLogAll ] Config: lasthost: KACE1000.****.***
[2020-06-08.10:08:45][AMPAgent:ConfigLogAll ] Config: serverversion: 7.0.121307
[2020-06-08.10:08:45][AMPAgent:ConfigLogAll ] Config: appliance: k1000
[2020-06-08.10:08:45][AMPAgent:ConfigLogAll ] Config: ampport: 52230
[2020-06-08.10:08:45][AMPAgent:ConfigLogAll ] Config: ampurl: http://kace1000:52230
[2020-06-08.10:08:45][AMPAgent:ConfigLogAll ] Config: webport: 80
[2020-06-08.10:08:45][AMPAgent:ConfigLogAll ] Config: weburl: http://kace1000
[2020-06-08.10:08:45][AMPAgent:ConfigLogAll ] Config: hideapps:
[2020-06-08.10:08:45][AMPAgent:ConfigLogAll ] Config: rto: 20
[2020-06-08.10:08:45][AMPAgent:ConfigLogAll ] Config: wto: 20
[2020-06-08.10:08:45][AMPAgent:ConfigLogAll ] Config: cto: 10
[2020-06-08.10:08:45][AMPAgent:ConfigLogAll ] Config: crto: 30
[2020-06-08.10:08:45][AMPAgent:ConfigLogAll ] Config: max download speed: unlimited
[2020-06-08.10:08:45][AMPAgent:ConfigLogAll ] Config: KSWMeterSvc max db rows: 5000
[2020-06-08.10:08:45][AMPAgent:ConfigLogAll ] Config: krash: false
[2020-06-08.10:08:45][AMPAgent:ConfigLogAll ] Config: pl: pluginDesktopAlerts,pluginPatching,pluginRunProcess,pluginWeb
[2020-06-08.10:08:45][AMPAgent:ConfigLogAll ] Config: servercompress: TRUE
[2020-06-08.10:08:45][AMPAgent:NimitzAgentProcess ] Machine ID: A851AC08-2D9F-49CA-BD75-903EDE31B043
[2020-06-08.10:08:45][AMPAgent:NimitzAgentProcess ] Creating Pipe Server...
[2020-06-08.10:08:45][AMPAgent:NimitzAgentProcess ] Creating Agent Listener...
[2020-06-08.10:08:45][AMPAgent:NimitzAgentProcess ] Creating scheduler...
[2020-06-08.10:08:45][AMPAgent:NimitzAgentProcess ] Creating connection...
[2020-06-08.10:08:49][AMPAgent:ClientReadCB ] Header: msgid (15362590); msgType (0)
[2020-06-08.10:08:49][AMPAgent:ClientReadCB ] Payload: pluginId: RunProcess (6); payloadLen (15)
[2020-06-08.10:08:49][AMPAgent:LogCurlError ] SSL is not detected: (35) error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol
[2020-06-08.10:08:49][pluginRunProcess:GetIdOfActiveUs] GetIdOfActiveUser: SECURITY_LOGON_TYPE: 10(18) There are no more files.
[2020-06-08.10:08:49][runkbot:GetKbot ] Kbot [4-0] not found locally, downloading ...
[2020-06-08.10:08:49][runkbot:IsLoggedIn ] IsLoggedIn: WTSGetActiveConsoleSessionId returned an inactive session(Session 1), trying GetActiveSessionPidList
[2020-06-08.10:08:49][runkbot:DownloadDependency ] Downloading dependency from KBOX location [http://kace1000.****.***/packages/kbots/4/bitlocker_inventory.ps1.3e003b8c673fced08b5d9867ae6bd381]
[2020-06-08.10:08:49][runkbot:DownloadDependency ] Downloading dependency from KBOX location [http://kace1000.****.***/packages/kbots/4/dcm_windows_inventory.ps1.5d466f58efb84c5f54bf91cdec188485]
[2020-06-08.10:08:49][runkbot:DownloadDependency ] Downloading dependency from KBOX location [http://kace1000.****.***/packages/kbots/4/ddpe_windows_inventory.ps1.ad74284a0a4ad1a74af2361dd4c3c5be]
[2020-06-08.10:08:49][runkbot:DownloadDependency ] Downloading dependency from KBOX location [http://kace1000.****.***/packages/kbots/4/tpm_inventory.ps1.7cac6d9bb056eed32552dfc2ddc4d614]
[2020-06-08.10:08:49][runkbot:GetIdOfActiveUser ] GetIdOfActiveUser: SECURITY_LOGON_TYPE: 10(18) There are no more files.
[2020-06-08.10:08:50][runkbot:GetIdOfActiveUser ] GetIdOfActiveUser: SECURITY_LOGON_TYPE: 10(18) There are no more files.
[2020-06-08.10:08:50][KInventory:runInventory ] KInventory Begin capturing Inventory...
[2020-06-08.10:08:50][KInventory:GetIdOfActiveUser ] GetIdOfActiveUser: SECURITY_LOGON_TYPE: 10(18) There are no more files.
[2020-06-08.10:08:50][KInventory:CInventoryData::Initi] KInventory InventoryData attempting to open DB file [C]
[2020-06-08.10:08:50][KInventory:CInventoryData::OpenD] KInventory InventoryData opening DB
[2020-06-08.10:08:50][KInventory:CInventoryData::OpenD] KInventory InventoryData calling db.open
[2020-06-08.10:08:50][KInventory:CInventoryData::Initi] KInventory InventoryData opened DB successfully
[2020-06-08.10:08:50][KInventory:CInventoryData::Initi] KInventory InventoryData populated the DB
[2020-06-08.10:08:50][KInventory:CCaptureInventory::In] Collecting Intel AMT Data
[2020-06-08.10:08:50][KInventory:GetIdOfActiveUser ] GetIdOfActiveUser: SECURITY_LOGON_TYPE: 10(18) There are no more files.
[2020-06-08.10:09:10][KInventory:CCaptureInventory::In] ACUConfig returned exit code 32, missing driver. Do not run ACUConfig with KInventory again.
[2020-06-08.10:09:10][KInventory:GetIdOfActiveUser ] GetIdOfActiveUser: SECURITY_LOGON_TYPE: 10(18) There are no more files.
[2020-06-08.10:09:10][KInventory:GetIdOfActiveUser ] GetIdOfActiveUser: SECURITY_LOGON_TYPE: 10(18) There are no more files.
[2020-06-08.10:09:20][KInventory:GetIdOfActiveUser ] GetIdOfActiveUser: SECURITY_LOGON_TYPE: 10(18) There are no more files.
[2020-06-08.10:09:21][KInventory:GetIdOfActiveUser ] GetIdOfActiveUser: SECURITY_LOGON_TYPE: 10(18) There are no more files.
[2020-06-08.10:09:22][KInventory:GetIdOfActiveUser ] GetIdOfActiveUser: SECURITY_LOGON_TYPE: 10(18) There are no more files.
[2020-06-08.10:09:23][KInventory:GetIdOfActiveUser ] GetIdOfActiveUser: SECURITY_LOGON_TYPE: 10(18) There are no more files.
[2020-06-08.10:09:24][KInventory:CCaptureInventory::ps] KInventory PowerShell Script: script -file "C:\ProgramData\Dell\KACE\kbots_cache\packages\kbots\4\dcm_windows_inventory.ps1" failed with exit code 0 and error msg:C:\ProgramData\Dell\KACE\kbots_cache\packages\kbots\4\dcm_windows_inventory.ps1 : Invalid class "DCIM_Battery"
+ CategoryInfo : NotSpecified: (:) [Write-Error], WriteErrorException
+ FullyQualifiedErrorId : Microsoft.PowerShell.Commands.WriteErrorException,dcm_windows_inventory.ps1
[2020-06-08.10:09:24][KInventory:GetIdOfActiveUser ] GetIdOfActiveUser: SECURITY_LOGON_TYPE: 10(18) There are no more files.
[2020-06-08.10:09:26][KInventory:runInventory ] KInventory Inventory Capture completed and stored in C:\ProgramData\Dell\KACE\inventory.xml
[2020-06-08.10:09:26][runkbot:GetIdOfActiveUser ] GetIdOfActiveUser: SECURITY_LOGON_TYPE: 10(18) There are no more files.
[2020-06-08.10:09:26][KCopy:UploadUsingCurl ] UploadFile: Server gzip compression is active
[2020-06-08.10:09:26][KCopy:GZipFile ] GZipFile: size of file C:\ProgramData\Dell\KACE\inventory.xml to zip is 423633
[2020-06-08.10:09:26][KCopy:UploadUsingCurl ] UploadFile: uploading file C:\ProgramData\Dell\KACE\inventory.xml.gz to http://kace1000:80/service/inventory.php?KUID=A851AC08-2D9F-49CA-BD75-903EDE31B043&VERSION=6.4.522
* Trying 10.254.0.81...
* Connected to kace1000 (10.254.0.81) port 80 (#0)
> PUT /service/inventory.php?KUID=A851AC08-2D9F-49CA-BD75-903EDE31B043&VERSION=6.4.522 HTTP/1.1
User-Agent: Mozilla/5.0 (Windows 10 Enterprise/6.3.18363; WOW64) libcurl/7.40.0 OpenSSL/1.0.1l zlib/1.2.8 DellKACE-Agent/6.4.522
Host: kace1000
Accept: */*
KUID: A851AC08-2D9F-49CA-BD75-903EDE31B043
Content-Encoding: gzip
Content-Length: 38059
Expect: 100-continue
< HTTP/1.1 100 Continue
* We are completely uploaded and fine
< HTTP/1.1 500 Server Error
< Date: Mon, 08 Jun 2020 17:09:26 GMT
< Server: Apache
< Expires: Thu, 19 Nov 1981 08:52:00 GMT
< Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
< Pragma: no-cache
< Set-Cookie: kboxid=4g3oj3tjoqie7bsdf2koup0jf4; path=/; HttpOnly
< Access-Control-Allow-Headers: x-dell-auth-timestamp, x-dell-auth-key, x-dell-auth-signature, accept, origin, content-type
< Access-Control-Allow-Origin: *
< Access-Control-Allow-Methods: PUT, DELETE, POST, GET, OPTIONS
< X-DellKACE-Appliance: k1000
< X-DellKACE-Host: KACE1000.****.***
< X-DellKACE-Version: 7.0.121307
< X-KBOX-WebServer: KACE1000.****.***
< X-KBOX-Version: 7.0.121307
< X-UA-Compatible: IE=9,EDGE
< Cache-Control: private, no-cache, no-store, proxy-revalidate, no-transform
< Content-Length: 0
< Connection: close
< Content-Type: text/html; charset=utf-8
<
* Closing connection 0
[2020-06-08.10:09:26][KCopy:UploadUsingCurl ] UploadFile: Server gzip compression cleanup.
[2020-06-08.10:09:26][KCopy:KCopyFile ] Error (cURL) copying files from 'C:\ProgramData\Dell\KACE\inventory.xml' to 'http://kace1000:80/service/inventory.php?KUID=A851AC08-2D9F-49CA-BD75-903EDE31B043&VERSION=6.4.522': (500) Unknown error
[2020-06-08.10:09:26][runkbot:ProcessOps_LaunchProgram] runkbot : create kbot process returned non-zero: error code 0 or status code 500(0) The operation completed successfully.
[2020-06-08.10:09:27][runkbot:UploadUsingCurl ] UploadFile: Server gzip compression is active
[2020-06-08.10:09:27][runkbot:GZipFile ] GZipFile: size of file C:\WINDOWS\TEMP\dkl17BA.tmp to zip is 13626
[2020-06-08.10:09:27][runkbot:UploadUsingCurl ] UploadFile: uploading file C:\WINDOWS\TEMP\dkl17BA.tmp.gz to http://kace1000.****.***/service/kbot_upload.php?BAD_MAC_IP=10.254.21.139&filename=KBOT_LOG.txt&mac=A851AC08-2D9F-49CA-BD75-903EDE31B043&kbotId=4
* Trying 10.254.0.81...
* Connected to kace1000.****.*** (10.254.0.81) port 80 (#0)
> PUT /service/kbot_upload.php?BAD_MAC_IP=10.254.21.139&filename=KBOT_LOG.txt&mac=A851AC08-2D9F-49CA-BD75-903EDE31B043&kbotId=4 HTTP/1.1
User-Agent: Mozilla/5.0 (Windows 10 Enterprise/6.3.18363; WOW64) libcurl/7.40.0 OpenSSL/1.0.1l zlib/1.2.8 DellKACE-Agent/6.4.522
Host: kace1000.****.***
Accept: */*
KUID: A851AC08-2D9F-49CA-BD75-903EDE31B043
Content-Encoding: gzip
Content-Length: 2062
Expect: 100-continue
< HTTP/1.1 100 Continue
* We are completely uploaded and fine
< HTTP/1.1 200 OK
< Date: Mon, 08 Jun 2020 17:09:27 GMT
< Server: Apache
< Connection: close
< Content-Length: 0
< Access-Control-Allow-Headers: x-dell-auth-timestamp, x-dell-auth-key, x-dell-auth-signature, accept, origin, content-type
< Access-Control-Allow-Origin: *
< Access-Control-Allow-Methods: PUT, DELETE, POST, GET, OPTIONS
< X-DellKACE-Appliance: k1000
< X-DellKACE-Host: KACE1000.****.***
< X-DellKACE-Version: 7.0.121307
< X-KBOX-WebServer: KACE1000.****.***
< X-KBOX-Version: 7.0.121307
< X-UA-Compatible: IE=9,EDGE
< Cache-Control: private, no-cache, no-store, proxy-revalidate, no-transform
< Content-Type: text/html; charset=utf-8
<
* Closing connection 0
[2020-06-08.10:09:27][runkbot:UploadUsingCurl ] UploadFile: Server gzip compression cleanup.
[2020-06-08.10:09:27][runkbot:CleanupLog ] Cleaning up log file [C:\WINDOWS\TEMP\dkl17BA.tmp]
Answers (2)
the main issue is the following:
[2020-06-08.10:09:27][runkbot:UploadUsingCurl ] UploadFile: uploading file C:\WINDOWS\TEMP\dkl17BA.tmp.gz to http://kace1000.****.***/service/kbot_upload.php?BAD_MAC_IP=10.254.21.139&filename=KBOT_LOG.txt&mac=A851AC08-2D9F-49CA-BD75-903EDE31B043&kbotId=4
Check this article: https://support.quest.com/kb/129683/
Please also be aware that the agent with 6.4 and the server with 7.0 is long End Of Life.
I suggest to update the agent to 7.0 at first and check it again.
Is the system newly deployed?
Do you use any IDS or DPI appliances?