Systems with CSA not boot

Question

After update from 6.0.1 to 6.0.2 some systems with CSA cun`t boot.
If manualy delete agent (in safe mode) - everething ok.
Few systems butable, but agent process takes more then 90% processor resourses.
Logs on CSA MC are clean
Any ideas? Manual uninstall agent on few hungreds workstaitions is unreal...

Answer 1

There has been a recent bug discovered with interaction of CSA and Windows 7 hosts where a file access control rule which implements digital suignature checking can cause a system to "hang" after entering credentials.  The bug is CSCtg98849.  The following workaround is provided in the bug:
Edit the "Base - Digital Signing of Downloaded Executables" rule module and disable the file access control "Send downloaded executables for scanning if opened for read".
Save the change.
Generate rules and deploy to affected hosts.
[Wrap text]  [Edit this enclosure]
Release-note: Added 05/25/2010  06:26:54 by scfringe
[Unwrap text]  [Edit this enclosure]
Release-note: Added 05/25/2010  06:26:54 by scfringe
[Unwrap text]  [Edit this enclosure]
SS-Review: Added 05/25/2010 06:13:20  by scfringe
[Wrap text]  [Edit this enclosure]
SS-Review: Added 05/25/2010 06:13:20  by scfringe
[Unwrap text]  [Edit this enclosure]
SS-Review: Added 05/25/2010 06:13:20  by scfringe
There has also been an issue seen where agents that have not received the new 6.0.2 binaries, but have had 6.0.2 rules pushed encounter issues.  The workaround in this instance is to schedule an update for the agents.
It would be advatageous to open a service request with TAC to effectively diagnose the issue, and ensure this is the proper bug for the behavior.
Scott
What
How Bad
Who
Versions
Status
   A-Assigned
Found
customer-use
Original-found
customer-use
Project
CSC.security
Product
csa
Component
client
Software
none
Obs-software
none
Hardware
none
Keyword
none          
Priority
P3
Severity
   severe (Sev2)
DE-priority
2
Dev-escape
Y
BadCodeFlag
N
DE-manager
ibonias
DTPT-manager
vidhya
Engineer
bipswain
Submitter
scfringe
Assigner
pgiang
Version
006.000(002.126)          
Original-version
006.000(002.126)
To-be-fixed
006.000(002)          
History
Histogram of CSCtg98849: Covering 2 days and counting, currently in A-Assigned state.
          N -> A [    0] |
          A ->   [    2] ------------------------------------A-----------------------------------[100.00%]
                          <-----------------------------------+----------------------------------->
                    25-May-2010                         26-May-2010                         27-May-2010
cdreier
05/26/2010  09:52:05 
Headline:
CSA: Windows Login Hangs or Takes  Excessive Time with CSA Enabled   --> CSA: Windows 7 Login Hangs or  Takes Excessive Time with CSA Enabled
cdetsbsi
05/25/2010  10:08:31 
Trouble-Tickets:
--> 614262487
pgiang
05/25/2010  06:35:29 
Assigner:
--> pgiang
pgiang
05/25/2010  06:35:29 
Assigned Date:
--> 05/25/2010 09:35:29
pgiang
05/25/2010  06:35:19 
Engineer:
--> bipswain
pgiang
05/25/2010  06:35:01 
Status:
N   --> A
pgiang
05/25/2010  06:35:29 
To-be-fixed:
--> 006.000(002)
cdetsbsi
05/25/2010  06:29:31 
Trouble-Tickets:
--> 614327539
cdetsbsi
05/25/2010  06:29:31 
Urgency-desc:
NA   --> P3
scfringe
05/25/2010  06:26:54 
Note Title:
--> Release-note
scfringe
05/25/2010  06:14:01 
Summary:
-->
scfringe
05/25/2010  06:13:20 
RNE-Approval-Flg:
N   -->
scfringe
05/25/2010  06:13:20 
Note Title:
--> SS-Review
scfringe
05/25/2010  06:12:14 
Defect Created:
-->