EMAgent Causing Excessive Load on Dell Security Management Server
Summary: Under certain conditions, the Dell Encryption Management Agent (EMAgent) starts server check-ins every minute. This may cause excessive traffic to the Dell Security Management Server (formerly Dell Data Protection Server) resulting in high resource utilization and possible service crashes. ...
Symptoms
Affected Products:
- Dell Security Management Server
- Dell Security Management Server Virtual
- Dell Full Disk Encryption
- Dell BitLocker Manager
- Dell Endpoint Security Suite Enterprise
- Dell Data Protection | Enterprise Edition Server
- Dell Data Protection | Virtual Edition
Affected Versions:
- v10.1 to 10.2
Affected Operating Systems:
- Windows 7
- Windows 10
This issue is present on EMAgent without the Self-Encrypting Drive (SED) plug-in. This includes:
- Dell Full Disk Encryption
- Dell BitLocker Manager
- Dell Endpoint Security Suite Enterprise
This issue is not present on:
- Dell Self-Encrypting Drive Manager
Endpoint:
In the DellAgent.log file in C:\Programdata\Dell\Dell Data Protection\, there are log messages indicating a check in every minute:
2019.05.20 20:36:53.571 [05184] (00015) I Comm : opening connection to https://ddpeserver.ddpetest.com:8888/agentv2 2019.05.20 20:36:53.571 [05184] (00015) E Comm : Could not locate saasManager plugin 2019.05.20 20:36:53.633 [05184] (00015) I Comm : sending 0 major events to server 2019.05.20 20:36:53.633 [05184] (00015) I Comm : closing connection to https://ddpeserver.ddpetest.com:8888/agentv2 2019.05.20 20:36:53.633 [05184] (00015) E Comm : HaveUserKeysToEscrow - No credentials are valid, nothing to escrow 2019.05.20 20:36:53.649 [05184] (00015) I Comm : next contact with server scheduled for 5/20/2019 8:37:53 PM 2019.05.20 20:37:53.655 [05184] (00015) I Comm : opening connection to https://ddpeserver.ddpetest.com/agentv2 2019.05.20 20:37:53.655 [05184] (00015) E Comm : Could not locate saasManager plugin 2019.05.20 20:37:53.717 [05184] (00015) I Comm : sending 0 major events to server 2019.05.20 20:37:53.733 [05184] (00015) I Comm : closing connection to https://ddpeserver.ddpetest.com/agentv2 2019.05.20 20:37:53.733 [05184] (00015) E Comm : HaveUserKeysToEscrow - No credentials are valid, nothing to escrow 2019.05.20 20:37:53.733 [05184] (00015) I Comm : next contact with server scheduled for 5/20/2019 8:38:53 PM
Server:
In the output.log files for Core Server, there may also be an excessive number of agent check-ins:
2019-05-20 11:08:58,664 INFO AGENT [Thread Pool Worker] - RequestResponse agent xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx has checked in recently
Also, the Dell Security Management Server may show high resource utilization for the Core Server Service.
Cause
Not Applicable
Resolution
This issue is resolved by upgrading the EMAgent to v10.3 or later.
To contact support, reference Dell Data Security International Support Phone Numbers.
Go to TechDirect to generate a technical support request online.
For additional insights and resources, join the Dell Security Community Forum.