Patching issues after upgrading to 8.0
We have recently upgraded our K1000 and agents to 8.0. Since then, we are getting errors during our patch jobs. It occurs on both detect and deploys jobs (they run separate). Seems like what is happening is the detect job times out, even though we have it set for time out of 5 hours, and then the kpatch.exe process stays running afterwards. The next job, the machine will report either a log upload fail or handshake error. I can kill the kpatch.exe process and the job will then run again, but sometimes it goes into the loop again with errors, sometimes it succeeds. We did not have this issue with version 7. Nothing has changed in our environment, and no other process are running with the K1000 during patch jobs. I have a 3 week old ticket with support, but they do not seem to know what is going on either. Just wanted to know if anyone has seen similar occurrence or have insight.
7 Comments
[ + ] Show comments
Answers (2)
Answer Summary:
Please log in to answer
Posted by:
anonymous_142269
6 years ago
Top Answer
After weeks of troubleshooting, we pinpointed the issue to LM.Detection.exe taking longer in 8.0 than previous versions. Quest support recommended we up the process timeout to 2 hours in settings > provisioning > communication settings. Quest support team is still looking into why LM.Detection is taking longer, but for now, all of our patching jobs are succeeding.
Posted by:
Hobbsy
6 years ago
Not sure if this is the answer, but are your agents/devices able to resolve the FQDN of your KACE SMA in your DNS? As that may cause communication issues a bit like this. Also with the switch to the KONEA agent the agent changed communication to port 443 only regardless of if you has SSL set on your SMA or not, so making sure ports are open as well may also help.
We did see timeout issues as well when the agents would report back Error in the failed status. Turns out they were completing even though they reported Error, they just failed to report back during the timeframe is why the Error occurred. Increasing our time to 5 hours did correct most of those. The systems we got errors with Handshake Failed or Log upload failed I was able to resolve by setting a script to stop the ampagent, purge the Patches folder under ProgramData\Quest\Kace and then restart the ampagent. This forced the agent to reobtain all patching files. A refresh of the patching essentially. Another thing to watch for is to ensure when it upgraded the client again to 8.0, that is did in fact purge the old Dell folders (C:\ProgramData\Dell\KCE & C:\Program Files (x86)\Dell\KACE) from the system as well.
Here is the batch commands I setup in a script to purge the Patching files from the local PC:
net stop ampagent
rd C:\ProgramData\Quest\KACE\Patches /s /q
net start ampagent
After the script run, do a detect on that PC and it'll take a while, but should repull down the needed files. - DaveMT 6 years ago
II've got a support ticket open, but the first suggestion of verifying that antivirus and monitoring software is excluding the Kace paths hasn't helped. We're already doing that, and these patch jobs are the same jobs we've had for years. This is just the first month of server patching since upgrading to version 8. - bwcarty 6 years ago
We have a GPO created with the GPO provisioning tool, and everything is configured as expected. It worked fine in the 6.x and 7.x days, but it's broken under 8.0 for us. Brand new GPO, current version of the tool, no other GPOs that install the agent, nothing on the server that would provision or update the agent.
As soon as I run gpupdate, the agent reinstalls. If I disable the GPO, the problem goes away. - bwcarty 6 years ago
For me the kpatch.exe gets hung in the task manager for detect and deploy. so I have to do a end task on kpatch.exe, then it takes off and the kpatch.exe will come and go in the task list and finish the tasks. But when I do a detect or a deploy again I have to repeat this process.
I have tried to uninstall and delete the quest folders under program files x86 and programdata, am I missing something. - pspaans 6 years ago