Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

App Control: Instant Clone VMs Linked to an Old Parent Template

App Control: Instant Clone VMs Linked to an Old Parent Template

Environment

App Control Server: 8.7+
App Control Agent: 8.7+

Symptoms

After creating a new Template Image in the web console, the Instant Clone VMs show up linked to an old previously created Parent Template

Cause

The Golden Image VM has previously been converted to a Template Computer using the legacy steps. This enables a flag in the DB that keeps linking any new clones to the old Parent Template

Resolution

These steps are required only once and will not be needed for any future Golden Image template modifications
 
  1. Agent-side boot up the Golden Image VM and open Command Prompt as Admin, and run:
    • cd "C:\Program Files (x86)\Bit9\Parity Agent"
      dascli password <Agent Password>
      dascli register newclient
      dascli tamperprotect 0
      
      net stop parity
      net start parity
    • Note: This step will generate a new Host Id for the Golden Image agent
  2. Open the console > go to Computers > Assets > find the newly connected Golden Image VM agen
    • Take note of the new "Host Id" found at the end of the URL in the browser address bar:
    • This is a article attached imageThis is a article attached image
  3. Open SQL Mgmt Studio and run the following query to unlink the VM from the previous Parent Template with this query:
    • use das; update dbo.hostmain set template_host_id = 0 where host_id = '1234'
  4. Re-initialize the agent by moving it into a Disabled mode policy and then back to its normal enforcement policy
    • If the computer has registered as a clone of a parent template then it will inherit the file inventory of the parent
    • This will result in incorrect or missing file inventory across all of the cloned VM agents
    • Re-initialization is needed to validate the true file inventory and to approve any new files that may have been added subsequently
  5. Wait until Initialization has completed and the Computer Details page shows and that Synchronization is 100%
  6. Next, please follow the steps in this KB to create an Instant Clone Template Image

Related Content


Labels (1)
Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎06-01-2022
Views:
1980
Contributors