1 Rookie
•
8 Posts
0
2419
February 7th, 2023 06:00
"Unit" Has not checked in for more than 7 days
We have around 110 units in a factory/office area with multiple Vlans and Group assigns.
50% of them have stopped responding to the server. The only way to get them respond again is factory reset the unit.
If you open WMS Manager on the unit it comes with error "Cant connect to server, Please try again later"
It only runs a RDP witch works perfectly. Internet works.
The Dell Wyse Management server is running the following version.
The clients varies in models and OS versions. Not all OS Versions in picture are in use.
We have tried to update units. Not working always.
We have tried to change VLAN assignment but they have same problem.
One unit can be fine and other one just beside it have the problem. The same model, same OS version, same Network/Switch.
They can work for 1 week or 10 weeks and then it happens.
Any one have any idea on what causes it ?
DELL-Scott H
Moderator
•
888 Posts
0
February 13th, 2023 06:00
Ok. I have seen this before.
1) You should not see anything in that Services section, you have some content in the advanced section which is a problem. It should be clear, like below
2) Go into each group in the hierarchy and make sure you choose"Reset Policy", but only in the WMS Settings section until you no longer see what you see in the screenshot you sent me. (See below)
3)Factory default a device, allow it to auto discover, register with WMS, does it eventually turn that CA Validation flag in and stop checking in?
DELL-Scott H
Moderator
•
888 Posts
0
February 7th, 2023 10:00
Can you post screenshots of the system /event log on the device?
Also can you post screenshots of the Central Management, WMS Settings from the device.
Almost every time I see this, it is due to the advanced setting under WMS settings on the device for "Validate Server certificate" being checked, when a self signed cert is in use.
Nobia_Help
1 Rookie
•
8 Posts
0
February 9th, 2023 05:00
If thats it im loosing my mind
Heres the device log.
But where do i change that ?
Device Setting.
DELL-Scott H
Moderator
•
888 Posts
0
February 9th, 2023 07:00
The log definitely shows it is trying to validate the certificate. The question is Why?
If you have confirmed you are NOT using DHCP OT or DNS_SRV and are NOT telling the device manually to use CA Validation, then your settings in your WMS policy need to be examined. Best way to confirm this, register the device to a group that does NOT have a policy attached to it.
Most of the time, what I see is customers go into a ThinOS 9 policy in WMS, go down to the WMS section, click advanced, then click out of it. Unfortunately, this leaves some ghost policies in place which enables the CA Validation. The device checks in successfully gets the policy and is then told by the policy to validate CA, which it cannot since it is self-signed, and the device drops out.
You can see the effective settings in a policy by viewing it from the group. You should NOT see anything inthe Services section for WMS, if you do...Bingo
Nobia_Help
1 Rookie
•
8 Posts
0
February 13th, 2023 01:00
So if the Option 167 is not set in DHCP it can happen ?
We did not fill out the Option 167.
I will now test in production to see if it changes anything.
Nobia_Help
1 Rookie
•
8 Posts
0
February 13th, 2023 01:00
WMS Setup. The units dont have any CA Val set.
Nobia_Help
1 Rookie
•
8 Posts
0
February 13th, 2023 06:00
Will try this. Thank you so much for the reply.
DELL-Scott H
Moderator
•
888 Posts
0
February 17th, 2023 06:00
Any feedback on your testing?
Nobia_Help
1 Rookie
•
8 Posts
0
February 20th, 2023 23:00
Hi so far it looks good on 4 test machines. Then i only have 50 more to change it on and reset.
DELL-Scott H
Moderator
•
888 Posts
0
February 21st, 2023 06:00
Sounds good. You can probably get away with unchecking the box under WMS Settings for "Validate CA Certificate" on other devices instead of factory defaulting them.