Secure Recovery Solution Agent registration on reinstall of Recovery Solution Agent.
Security concerns addressed.
This hotfix is in the form of AeXRSAView.exe and AgentRes.dll.
After implementing the hotfix, the registration dialog for the Recovery Agent will appear with a different error after reinstallation of Recovery Agent. Following are the changes:
Drop-down controls (and accompanied functionality) are replaced by edit boxes.
One additional error message is added. In case if the user enters account name without domain, new error will ask user to enter account in Domain\UserName format. Text of the error is: "Invalid account format. Please specify account in Domain\\User format."
This will not appear in old registration because accounts are pre-populated in correct format.
This change to the registration dialog is registry controllable as well. The value "HKLM\SOFTWARE\Altiris\eXpress\Recovery Solution Agent\SetupRegistrationData", DWORD value "securedialog" = 0 maybe used to disable the secure functionality.
When this change is disabled registration will work in in old way. By default (if no value is specified in registry) the new secure registration will take place.
The hotfix can also be updated to the Recovery Solution Agent Packages which are located on three locations: one location on the Notification Server and two locations on the Recovery Solution Server.
AeXRSAView.exe and AgentRes.dll should be updated to the Data1.cab (which are present in the Recovery Solution Agent package) which can be modified using the ASPack.exe utility. Whenever a client side fix is replaced on the client computer, the fix can be updated on the Recovery Solution Agent package so that the next time the Recovery Solution Agent is installed on a new client computer so that the fix is automatically present on the client computer.
The Data1.cab, should be modified on the following locations:
Folder Program Files\Altiris\Notification Server\NSCap\Bin\Win32\X86\Recovery Agent Package located on the Notification Server.
Folder Program Files\Altiris\Recovery Solution\Server\Agent\Install located on the Recovery Solution Server.
Folder Program Files\Altiris\Recovery Solution\Server\Agent\Package located on the Recovery Solution Server.
The fix can be replaced in the Data1.cab the following way:
Use ASPack.exe to modify Recovery Solution Agent package.
Locate ASPack.exe in folder C:\Program Files\Altiris\Recovery Solution\Console\Tools.
Launch ASPack.exe from C:\Program Files\Altiris\Recovery Solution\Console\Tools.
For the Source Package, browse to Program Files\Altiris\Notification Server\NSCap\Bin\Win32\X86\Recovery Agent Package\Data1.cab in ASPack.exe.
Select Action as Modify Package files from the drop down list and click Start.
After clicking Start, the list of files contained in Data1.cab or AgentSetup.exe will be shown.
Click the Add button and add the new fix.
After the new fix has been added click next and a message will be displayed, “The package has been modified. Press the Finish button to save changes.” Click Finish.
After the package has been saved, continue modifying the Data1.cab or AgentSetup.exe on the other two remaining locations, i.e. Program Files\Altiris\Recovery Solution\Server\Agent\Install and Program Files\Altiris\Recovery Solution\Server\Agent\Package by repeating steps 1 to 8 again.