During the installation of Maintenance Pack 3 (MP3) on a Symantec Security Information Manager (SSIM) 4.7 machine the certificate keystore of the onboard SSIM Agent gets overwritten.
There are two scenarios where this causes a problem.
1. The SSIM appliance is setup to use a signed certficate. It will break the communication between the onboard agent and the manager.
2. The Symantec Event Collector for 4.4 for Microsoft Vista and Microsoft Windows 2008 is installed on the SSIM machine and configured for onboard use and the sensor is configured to use the HTTPS protocol. This will break the communication between the Collector wsmanagement sensor and the Windows Remorte Management (WinRM) service on the Windows machine.
When installing MP3 the onboard SSIM Agent 4.7.0 gets updated to version 4.7.1. This will overwrite the certificate keystore of the Agent.
1. When you haven't installed MP3 yet, you can take a backup of the Agent certificate keystore
To take a backup of the certificate keystore file run the following command as root: