000018665 - How to successfully reinstall ACE/Agent 4.4.1

Document created by RSA Customer Support Employee on Jun 16, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000018665
Applies ToRSA ACE/Agent 4.4.1 for Windows NT (no longer supported as of 3-3-2003)
RSA ACE/Server 4.1 (no longer supported as of 2-1-2004)
Microsoft Windows NT 4.0
Microsoft Windows NT SP6a
NAP Server installed on Domain Controller and Client software installed on Workstation
Root certificate and server certificate created from catool and placed in a network directory
IssueHow to successfully reinstall ACE/Agent 4.4.1
The software functions normally after a fresh installation, users are challenged upon doing a domain login or when trying to access domain resources
Error: "SSL Handshake error"
On the client one gets the error "SecurID cannot make connection...". SSL Handshake error appears in the event viewer.
CauseACE/Agent does not do a clean uninstall, there are files which need to be deleted if a reboot is not done and the registry key is not cleared.
ResolutionSolution 1: Clear the following key HKEY_LOCAL_MACHINE\SOFTWARE\SDTI\ACECLIENT and make sure the following are also deleted:

C:\WINNT\System32\sdtest.exe
C:\WINNT\System32\sdui.dll
C:\WINNT\System32\sdroot.crt
C:\WINNT\System32\sdconf.rec
C:\WINNT\System32\sdagentsa.dll
C:\WINNT\System32\sdagentrt.dll

Solution 2: After uninstalling the ACE/Agent reboot the domain controller and then reinstall and reboot and also reboot the client.
WorkaroundACE/Agent is uninstalled from the domain controller and reinstalled (the certificates can be taken from the previous set or from a newly created set)
Legacy Article IDa2526

Attachments

    Outcomes