Agent Certificate expiring issue
Symptoms
Whenever there are connection issues between the agent and the backend server, you should check for the platform logs located at C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\GVClient.PlatformHub.Windows\Logs, and if you see the below errors, it means there is a problem with the agent certificate which has expired:
07/12/2023 20:23:15.012 [ T20\AgentEdgeConnectivityManager.ManageConnection] [OfficeVersionNumber: 16.0.16529.20118, OfficeVersionName: O365BusinessRetail] [CpuCores: 1] [TotalMemory: 7.9GB] INFORMATION: Connection was aborted: System.AggregateException: One or more errors occurred. (An error occurred while sending the request.)
---> System.Net.Http.HttpRequestException: An error occurred while sending the request.
---> System.IO.IOException: The decryption operation failed, see inner exception.
---> System.ComponentModel.Win32Exception (0x80090327): An unknown error occurred while processing the certificate.
Symptoms seen in the agent include
No ML Suggestions
Failure to update configuration
Where Agents are newly deployed - a greyed out Add-in within the MS Office suite
No reporting statistics
Problem
- The agent certificate has expired
Solution
There are 2 possible solutions for this depending on the user’s needs:
If you wish to upgrade the current version of the Agent:
Please Install the latest agent version 3.3.2 -
NOTE - When deploying the MSI to endpoints an InstallerConfig.json is required. Please see Agent - installerConfig.json or contact support for more information.Download link available until 21 July - https://we.tl/t-RiiFkDcwPY
Please contact support@getvisibility.com after this date
If you wish to stay on the current version of the agent
NOTE: Make sure the following setting is set to “false“ in your Expert Mode config:
"autoUpdateEnabled": false
Otherwise your agents will be automatically upgraded to version 3.3.2.
Run the following PowerShell remediation script in all the endpoints were the agent is installed:
Once this is run, the certificates of the agent should be updated and the agent should connect to the server with no issues (make sure the correct server address is added to the config of the agent).
Also, for more information about how to run this remediation script globally using the most common software management tools, visit Expired certificate remediation script
Related content
Classified as Getvisibility - Partner/Customer Confidential