MDOP Asset Inventory Service - Announcements announcement
-
Link
Overview
=======
Every Asset Inventory Service (AIS) agent installation package contains a certificate that identifies the account of the AIS subscriber. This certificate is used to ensure that inventory reported by an agent is associated with the correct account when it is received at the AIS web service.
This certificate has a lifetime of 3 years. After this time, the installation package cannot be used to successfully enroll new agents, although existing agents will continue to function just fine. A notification will be displayed in the console for those accounts that are approaching the 3 year threshold (approximately 60 days before the certificate expires). The systems administrator of the AIS account should then download their new agent installation package which is available from the normal download page in the AIS console.
The AIS service supports multiple agent installation packages per account. This means that the original package and the new package can both be used to install new agents. This allows a transition period where an organization can change their procedures to use the new installation package. Eventually, however, the certificate in the original installation package will expire, after which time only the new package should be used.
Frequently Asked Questions
=======================
What do I do if I see the following announcement on my home page:
“Your original AIS agent installation package expires on <expiry date>. Please download your new agent installation package and use it for all future installations. [Computers that had the original agent installation package installed before <expiry date> do not have to be updated.]”
This means that your original agent installation package is going to expire soon, and you need to download a new one and use that for agent installations. The message will typically be shown 60 days before the package expires. You can continue using the original installation package until the date in the announcement but it is recommended that you start using the new one as soon as possible.
When I go to the client deployment area, there’s no option to download a new installation package
If you see the expiry announcement on the home page, the service will have generated a new installation package for your account. You download it the same way you downloaded the original package by visiting the Client Deployment area of the Management and Support workspace and click on the link that says “Download Client Here”. You can verify that you have downloaded the latest package by viewing the properties of downloaded file as follows:
· Select the file and display the property page
· Select the Digital Signatures Tab and view Signature List
· Locate “Microsoft Corporation” in the list and double-click it
· The Signing Time on the displayed property page should be Nov 2010.
What happens if I carry on using the original installation package?
If the announcement is shown on the home page and you continue to use the original installation package after the date shown in the message, you will not be able to successfully enroll agents into the AIS service. The installation will be successful, but when the agent attempts to enroll in the service, it will be rejected. The only way to correct this situation is to download the new installation package from the service and install that on the affected machines. [see below: How do I correct a failed installation?]
What do I do if I see the following announcement on my home page?
“Your original AIS agent installation package expired on <expiry date>. Please download your new agent installation package and use it for all future installations. [Computers that had the original agent installation package installed before <expiry date> do not have to be updated.]”
This means that your original agent installation package has expired. If you obtained a new installation package and phased out using the old package before the date of expiry, then you have no further actions. If, however, you have been attempting to deploy agents using your original agent installation package then you need to take the following action:
- Stop using the original installation package
- Download a new agent installation package from the AIS console by visiting the Client Deployment area of the Management and Support workspace and click on the link that says “Download Client Here”
- Start using the new installation package for all future installations
- Identify the machines where an attempt was made to install the AIS agent with the expired installation package.
o These will be machines where the agent was recently installed, but are not displayed in the console.
o For these machines, re-run the install with the new package [see below: How do I correct a failed installation?]
How do I correct a failed installation?
If you identify a machine where an attempt was made to install an AIS agent, but the enrollment failed because the agent installation package had expired, proceed as follows:
- Option #1
o Uninstall the AIS agent
§ Asset Inventory Service Tips and Troubleshooting
· Tip: How to remove the AIS client software
o Run the installation using the new agent installation package
- Option #2
o Run the installation using the following MSI flags: REINSTALLMODE=vomus
§ For example: msiexec /I <path to new .msi file> REINSTALLMODE=vomus
Note: if you simply run the new agent install on the failed machine (without following either of these options) it will not successfully update the agent configuration and enroll with the service.
How do I know when my agent installation package will expire?
The following steps describe how to determine when an agent installation package was signed. If the current date is less than 3 years from this date, the package can still be used to install and enroll an agent :
· Locate the agent installation package
· Select the installation package file and display the property page
· Select the Digital Signatures Tab and view Signature List
· Locate “Microsoft Corporation” in the list and double-click it
· If the Signing Time on the displayed property page is less than 3 years ago, then the package can still be used to install and enroll an agent.
Why does the certificate in the agent installation package expire after 3 years?
Certificates have an expiry date to reduce the time period available to an attacker. Three years was adopted as a reasonable balance between renewing the agent installation packages and providing acceptable security for user accounts.
-
0 VotesImportant Information About Your AIS Agent Installation Package
Overview ======= Every Asset Inventory Service (AIS) agent installation package contains a certificate that identifies the account of the AIS ...
-
0 Votes
New AIS 2.0 Beta is Now Available
Announcing Microsoft Asset Inventory Service 2.0. This is a new release of Microsoft Asset Inventory Service Microsoft Asset Inventory Service (AIS). ...Discussion | 1 Replies | 16894 Views | Created by Paul Bourgeau - Monday, July 12, 2010 11:01 PM | Last reply by Paul Bourgeau - Thursday, September 23, 2010 4:15 PM -
0 Votes
pop up window
window explorer box wants user name and password not thru safe means?Answered | 1 Replies | 14198 Views | Created by everettekitty - Sunday, July 4, 2010 3:17 PM | Last reply by Paul Bourgeau - Monday, July 12, 2010 11:07 PM -
0 Votes
error
everytime whenever i want to start the program i have windowsvista home premium first is showing hard disc error (301)Answered | 1 Replies | 14419 Views | Created by djivdji - Sunday, May 30, 2010 1:57 PM | Last reply by Paul Bourgeau - Thursday, June 24, 2010 4:23 PM -
0 Votes
languages
I m having problem changing window 7 starter to english because it was purchase in ItalyAnswered | 1 Replies | 17751 Views | Created by langprob - Tuesday, March 9, 2010 7:32 PM | Last reply by Paul Bourgeau - Wednesday, March 10, 2010 4:25 PM -
0 Votes
Network traffic
Hi, What is the size of the files that are sent to AIS? Thank you!Answered | 1 Replies | 13670 Views | Created by Dr. K - Friday, February 26, 2010 9:32 PM | Last reply by Paul Bourgeau - Wednesday, March 3, 2010 4:43 PM -
0 Votes
misssing file in windows\system32\config\system
My server has problem, misssing file in windows\system32\config\system, i already settup repair windows by install disk and select ''R'' but i could not copy file from windows\repair to ...Answered | 1 Replies | 16056 Views | Created by htkvn - Saturday, January 30, 2010 8:49 AM | Last reply by Paul Bourgeau - Tuesday, February 2, 2010 4:21 PM -
0 Votes
Lead.Windows.Forms
Every time I try to run windows live messenger, comes up a window and say that (Error File or assembly Lead.Windows.Forms was not found). And the computer runs very slowly too.Answered | 1 Replies | 16450 Views | Created by Damiao Silva - Saturday, November 28, 2009 12:52 PM | Last reply by Paul Bourgeau - Friday, December 18, 2009 4:32 PM -
0 Votes
AIS 1.5 has now completed the Preview Phase
We are pleased to announce that the Asset Inventory Service is now officially released and has exited the 'preview' phase. This new release offered capabilities that allow ...Discussion | 0 Replies | 18437 Views | Created by Paul Bourgeau - Thursday, February 26, 2009 12:25 AM -
0 Votes
xp media addition security problem
when i turn on my PC even with password protected in control panel it goes str8 to desk top. it will only go to password protect if i go to change user. -
0 Votes
Have you been using License Reconciliation in AIS 1.5?
Hello, If you are an AIS customer and you have used the new Licensing features introduced in version 1.5, we want to hear from you! Please visit ... -
0 Votes
This forum has migrated successfully on December 10, 2008
As part of the migration, posting of new threads and messages is no longer allowed on the Forums 2.x platform. For reporting bugs on the Forums ...Discussion | 1 Replies | 16795 Views | Created by Alicia Cales - Thursday, December 11, 2008 4:04 AM | Last reply by Paul Bourgeau - Monday, January 12, 2009 6:25 PM -
0 Votes
This forum has moved the week of 12/8/2008
Microsoft has created a new forums platform (MSDN | TechNet | Expression | Microsoft) with increased performance, stability, and an improved user experience. During the week of ... -
0 Votes
The Asset Inventory Service 1.5 Preview is now Live!
The AIS team is happy to announce that AIS 1.5 has been rolled out (one day ahead of schedule, in fact)! The next time you log into AIS, you will notice a new tab in ...Discussion | 1 Replies | 14274 Views | Created by paulbour - Thursday, October 30, 2008 9:33 PM | Last reply by Annika Elias _MSFT_ - Tuesday, November 25, 2008 10:23 PM -
0 Votes
Password Forgotten!
Hi, Folks! I'm hoping someone more techy than me can help with our problem, so here goes: Someone (could have been one of four kids or the husband) has ...Answered | 1 Replies | 15719 Views | Created by Merris - Wednesday, November 19, 2008 12:58 AM | Last reply by Paul Bourgeau - Wednesday, November 19, 2008 10:56 PM -
0 Votes
Welcome!
Welcome! Welcome to the System Center Online Services Asset Inventory Service forums. These forums have been created to encourage open ...Discussion | 0 Replies | 15721 Views | Created by Paul Bourgeau - Friday, September 28, 2007 7:20 PM
MDOP Asset Inventory Service - Announcements announcement
-
Link
Overview
=======
Every Asset Inventory Service (AIS) agent installation package contains a certificate that identifies the account of the AIS subscriber. This certificate is used to ensure that inventory reported by an agent is associated with the correct account when it is received at the AIS web service.
This certificate has a lifetime of 3 years. After this time, the installation package cannot be used to successfully enroll new agents, although existing agents will continue to function just fine. A notification will be displayed in the console for those accounts that are approaching the 3 year threshold (approximately 60 days before the certificate expires). The systems administrator of the AIS account should then download their new agent installation package which is available from the normal download page in the AIS console.
The AIS service supports multiple agent installation packages per account. This means that the original package and the new package can both be used to install new agents. This allows a transition period where an organization can change their procedures to use the new installation package. Eventually, however, the certificate in the original installation package will expire, after which time only the new package should be used.
Frequently Asked Questions
=======================
What do I do if I see the following announcement on my home page:
“Your original AIS agent installation package expires on <expiry date>. Please download your new agent installation package and use it for all future installations. [Computers that had the original agent installation package installed before <expiry date> do not have to be updated.]”
This means that your original agent installation package is going to expire soon, and you need to download a new one and use that for agent installations. The message will typically be shown 60 days before the package expires. You can continue using the original installation package until the date in the announcement but it is recommended that you start using the new one as soon as possible.
When I go to the client deployment area, there’s no option to download a new installation package
If you see the expiry announcement on the home page, the service will have generated a new installation package for your account. You download it the same way you downloaded the original package by visiting the Client Deployment area of the Management and Support workspace and click on the link that says “Download Client Here”. You can verify that you have downloaded the latest package by viewing the properties of downloaded file as follows:
· Select the file and display the property page
· Select the Digital Signatures Tab and view Signature List
· Locate “Microsoft Corporation” in the list and double-click it
· The Signing Time on the displayed property page should be Nov 2010.
What happens if I carry on using the original installation package?
If the announcement is shown on the home page and you continue to use the original installation package after the date shown in the message, you will not be able to successfully enroll agents into the AIS service. The installation will be successful, but when the agent attempts to enroll in the service, it will be rejected. The only way to correct this situation is to download the new installation package from the service and install that on the affected machines. [see below: How do I correct a failed installation?]
What do I do if I see the following announcement on my home page?
“Your original AIS agent installation package expired on <expiry date>. Please download your new agent installation package and use it for all future installations. [Computers that had the original agent installation package installed before <expiry date> do not have to be updated.]”
This means that your original agent installation package has expired. If you obtained a new installation package and phased out using the old package before the date of expiry, then you have no further actions. If, however, you have been attempting to deploy agents using your original agent installation package then you need to take the following action:
- Stop using the original installation package
- Download a new agent installation package from the AIS console by visiting the Client Deployment area of the Management and Support workspace and click on the link that says “Download Client Here”
- Start using the new installation package for all future installations
- Identify the machines where an attempt was made to install the AIS agent with the expired installation package.
o These will be machines where the agent was recently installed, but are not displayed in the console.
o For these machines, re-run the install with the new package [see below: How do I correct a failed installation?]
How do I correct a failed installation?
If you identify a machine where an attempt was made to install an AIS agent, but the enrollment failed because the agent installation package had expired, proceed as follows:
- Option #1
o Uninstall the AIS agent
§ Asset Inventory Service Tips and Troubleshooting
· Tip: How to remove the AIS client software
o Run the installation using the new agent installation package
- Option #2
o Run the installation using the following MSI flags: REINSTALLMODE=vomus
§ For example: msiexec /I <path to new .msi file> REINSTALLMODE=vomus
Note: if you simply run the new agent install on the failed machine (without following either of these options) it will not successfully update the agent configuration and enroll with the service.
How do I know when my agent installation package will expire?
The following steps describe how to determine when an agent installation package was signed. If the current date is less than 3 years from this date, the package can still be used to install and enroll an agent :
· Locate the agent installation package
· Select the installation package file and display the property page
· Select the Digital Signatures Tab and view Signature List
· Locate “Microsoft Corporation” in the list and double-click it
· If the Signing Time on the displayed property page is less than 3 years ago, then the package can still be used to install and enroll an agent.
Why does the certificate in the agent installation package expire after 3 years?
Certificates have an expiry date to reduce the time period available to an attacker. Three years was adopted as a reasonable balance between renewing the agent installation packages and providing acceptable security for user accounts.
