Dear All,
I have been setting up our DS 7.5 SP1 HF4 system to work with SSL according to the following article:
http://www.symantec.com/business/support/index?page=content&id=HOWTO95059
All was working OK with BIOS machines (no EUFI), but once I switched the NS to only accept SSL, i found that I got these errors in the SbsLog_TFTP.txt:
Mon Feb 16 16:36:53 2015 1060 tftp.cpp Sbs::TftpServer::ProcessConnection 1082 Debug Req# 1, Failure code 995, client [192.168.117.129, 2070], file 'D:\Altiris\Altiris Agent\Agents\Deployment\SBS\Images\BStrap\x86pc\BStrap.0', options [flag=4 blk=512 tm=5 sz=24511]
Mon Feb 16 16:36:53 2015 3092 tftp.cpp Sbs::TftpServer::ProcessConnection 1082 Debug Req# 2, Success, client [192.168.117.129, 2071], file 'D:\Altiris\Altiris Agent\Agents\Deployment\SBS\Images\BStrap\x86pc\BStrap.0', time 0 secs, options [flag=1 blk=1456 tm=5 sz=0]
From here, then I looked high and low for the answer to this, but then found this article:
http://www.symantec.com/docs/TECH227344
In this article, it suggests that this issue is a coding problem with the SbsServer.exe file version 12.0.0.6274 and below and that it will be fixed in SMP 7.5 SP1 HF5 (the next hotfix) with version 12.0.0.6278 of the exe.
I checked my SbsServer.exe and it is version 12.0.0.6274.
The article says that as a part of the hotfix configuration, you need to change the following section of the SbsConfiguration.xml to look like this with the protocol="http" and port="80" settings changed to protocol="https" and port="443":
<clienthandler type="network" protocol="https" servername="NSServer.fqdn" port="443" validatecertificate="no"/>
Strangely, I still see that in the SMP 7.5 SP1 HF5 release notes, I do not see that the issue still shows:
Interestingly, when I changed the settings in the SbsConfiguration.xml to the correct ones and restarted the TFTP service, everything started to work again.
So, my question is, do I need SMP 7.5 SP1 HF5 or not? Just changing the config seems to work in this case - do I still need to upgrade and am i breaking something else?
Kindest regards,
QuietLeni