EMAgent Causing Excessive Load on Dell Security Management Server

Affected Products:

• Dell Security Management Server
• Dell Security Management Server Virtual
• Dell Full Disk Encryption
• Dell BitLocker Manager
• Dell Endpoint Security Suite Enterprise
• Dell Data Protection | Enterprise Edition Server
• Dell Data Protection | Virtual Edition

Affected Versions:

• v10.1 to 10.2

Affected Operating Systems:

• Windows 7
• Windows 10

This issue is present on EMAgent without the Self-Encrypting Drive (SED) plug-in. This includes:

• Dell Full Disk Encryption
• Dell BitLocker Manager
• Dell Endpoint Security Suite Enterprise

This issue is not present on:

• Dell Self-Encrypting Drive Manager

Endpoint:

In the DellAgent.log file in C:\Programdata\Dell\Dell Data Protection\, there are log messages indicating a check in every minute:

2019.05.20 20:36:53.571 [05184] (00015) I Comm : opening connection to https://ddpeserver.ddpetest.com:8888/agentv2
2019.05.20 20:36:53.571 [05184] (00015) E Comm : Could not locate saasManager plugin
2019.05.20 20:36:53.633 [05184] (00015) I Comm : sending 0 major events to server
2019.05.20 20:36:53.633 [05184] (00015) I Comm : closing connection to https://ddpeserver.ddpetest.com:8888/agentv2
2019.05.20 20:36:53.633 [05184] (00015) E Comm : HaveUserKeysToEscrow - No credentials are valid, nothing to escrow
2019.05.20 20:36:53.649 [05184] (00015) I Comm : next contact with server scheduled for 5/20/2019 8:37:53 PM
2019.05.20 20:37:53.655 [05184] (00015) I Comm : opening connection to https://ddpeserver.ddpetest.com/agentv2
2019.05.20 20:37:53.655 [05184] (00015) E Comm : Could not locate saasManager plugin
2019.05.20 20:37:53.717 [05184] (00015) I Comm : sending 0 major events to server
2019.05.20 20:37:53.733 [05184] (00015) I Comm : closing connection to https://ddpeserver.ddpetest.com/agentv2
2019.05.20 20:37:53.733 [05184] (00015) E Comm : HaveUserKeysToEscrow - No credentials are valid, nothing to escrow
2019.05.20 20:37:53.733 [05184] (00015) I Comm : next contact with server scheduled for 5/20/2019 8:38:53 PM

Server:

In the output.log files for Core Server, there may also be an excessive number of agent check-ins:

2019-05-20 11:08:58,664 INFO AGENT [Thread Pool Worker] - RequestResponse agent xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx has checked in recently

Also, the Dell Security Management Server may show high resource utilization for the Core Server Service.

Not Applicable

This issue is resolved by upgrading the EMAgent to v10.3 or later.

To contact support, reference Dell Data Security International Support Phone Numbers.
Go to TechDirect to generate a technical support request online.
For additional insights and resources, join the Dell Security Community Forum.