EMAgent Causing Excessive Load on Dell Security Management Server

Summary: Under certain conditions, the Dell Encryption Management Agent (EMAgent) starts server check-ins every minute. This may cause excessive traffic to the Dell Security Management Server (formerly Dell Data Protection Server) resulting in high resource utilization and possible service crashes. ...

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.

Symptoms

Affected Products:

  • Dell Security Management Server
  • Dell Security Management Server Virtual
  • Dell Full Disk Encryption
  • Dell BitLocker Manager
  • Dell Endpoint Security Suite Enterprise
  • Dell Data Protection | Enterprise Edition Server
  • Dell Data Protection | Virtual Edition

Affected Versions:

  • v10.1 to 10.2

Affected Operating Systems:

  • Windows 7
  • Windows 10

This issue is present on EMAgent without the Self-Encrypting Drive (SED) plug-in. This includes:

  • Dell Full Disk Encryption
  • Dell BitLocker Manager
  • Dell Endpoint Security Suite Enterprise

This issue is not present on:

  • Dell Self-Encrypting Drive Manager

Endpoint:

In the DellAgent.log file in C:\Programdata\Dell\Dell Data Protection\, there are log messages indicating a check in every minute:

2019.05.20 20:36:53.571 [05184] (00015) I Comm : opening connection to https://ddpeserver.ddpetest.com:8888/agentv2
2019.05.20 20:36:53.571 [05184] (00015) E Comm : Could not locate saasManager plugin
2019.05.20 20:36:53.633 [05184] (00015) I Comm : sending 0 major events to server
2019.05.20 20:36:53.633 [05184] (00015) I Comm : closing connection to https://ddpeserver.ddpetest.com:8888/agentv2
2019.05.20 20:36:53.633 [05184] (00015) E Comm : HaveUserKeysToEscrow - No credentials are valid, nothing to escrow
2019.05.20 20:36:53.649 [05184] (00015) I Comm : next contact with server scheduled for 5/20/2019 8:37:53 PM
2019.05.20 20:37:53.655 [05184] (00015) I Comm : opening connection to https://ddpeserver.ddpetest.com/agentv2
2019.05.20 20:37:53.655 [05184] (00015) E Comm : Could not locate saasManager plugin
2019.05.20 20:37:53.717 [05184] (00015) I Comm : sending 0 major events to server
2019.05.20 20:37:53.733 [05184] (00015) I Comm : closing connection to https://ddpeserver.ddpetest.com/agentv2
2019.05.20 20:37:53.733 [05184] (00015) E Comm : HaveUserKeysToEscrow - No credentials are valid, nothing to escrow
2019.05.20 20:37:53.733 [05184] (00015) I Comm : next contact with server scheduled for 5/20/2019 8:38:53 PM

Server:

In the output.log files for Core Server, there may also be an excessive number of agent check-ins:

2019-05-20 11:08:58,664 INFO AGENT [Thread Pool Worker] - RequestResponse agent xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx has checked in recently

Also, the Dell Security Management Server may show high resource utilization for the Core Server Service.

Cause

Not Applicable

Resolution

This issue is resolved by upgrading the EMAgent to v10.3 or later.


To contact support, reference Dell Data Security International Support Phone Numbers.
Go to TechDirect to generate a technical support request online.
For additional insights and resources, join the Dell Security Community Forum.

Affected Products

Dell Encryption, Dell Endpoint Security Suite Enterprise
Article Properties
Article Number: 000130879
Article Type: Solution
Last Modified: 07 May 2024
Version:  8
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.