Operations Manager configuration fails with registry error in Windows Server 2019 Japanese Operating System.
Article ID: 100049878
Updated On:
Description
Error Message
"Unable to grant access registry key HKEY_LOCAL_MACHINE\SOFTWARE\KVS\ENTERPRISE VAULT"
The MonitoringWebAppConfig.log file will show the following error:
MonitoringWebAppConfig){WebAppConfigForm.GrantAccessToLocalMachineRegistryKey} key = SOFTWARE\KVS\ENTERPRISE VAULT is valid, granting desired rights (MonitoringWebAppConfig){WebAppConfigForm.GrantAccessToLocalMachineRegistryKey} System.InvalidOperationException: このアクセス制御リストは標準の形式ではないため、変更できません。 場所 System.Security.AccessControl.CommonAcl.ThrowIfNotCanonical() 場所 System.Security.AccessControl.CommonAcl.AddQualifiedAce(SecurityIdentifier sid, AceQualifier qualifier, Int32 accessMask, AceFlags flags, ObjectAceFlags objectFlags, Guid objectType, Guid inheritedObjectType) 場所 System.Security.AccessControl.DiscretionaryAcl.AddAccess(AccessControlType accessType, SecurityIdentifier sid, Int32 accessMask, InheritanceFlags inheritanceFlags, PropagationFlags propagationFlags) 場所 System.Security.AccessControl.CommonObjectSecurity.ModifyAccess(AccessControlModification modification, AccessRule rule, Boolean& modified) 場所 System.Security.AccessControl.CommonObjectSecurity.AddAccessRule(AccessRule rule) 場所 Symantec.EnterpriseVault.OperationsManager.WebAppConfigForm.GrantAccessToLocalMachineRegistryKey(String username, String localMachineSubKeyName)
Cause
The issue is due to the order of permissions on the \HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\KVS\Enterprise Vault registry key with the Windows 2019 Japanese Operating System. The issue does not occur on the Windows 2016 Japanese Operating System. This issue has been reported in EV 12.5.3 and EV 14.1.
Resolution
Work Around:
To work around this issue perform the following:
1. Open Registry Editor.
2. Move to 'HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\KVS' and right click on the 'KVS' key.
3. Click 'Permissions...' . A Windows Security Pop up is displayed. Choose 'Reorder'.
Windows Security message:
The Permissions KVS on are incorrectly ordered, which may cause some entries to be ineffective.
-To order the permissions correctly. click Reorder.
-To leave the permissions unchanged (the view will be read-only). click Cancel. Reorder Cancel
4. Click 'Advanced'
5.‘Advanced Security Settings for KVS’ is different between English OS and Japanese OS.
6. Save 'Permissions for KVS'
7. Reopen 'Permissions for KVS' and then ‘Advanced Security Settings for KVS’ .
8. Modify 'Permission entries' in 'Permissions' tab to be the same as follows in English OS.
Permission entries;
| Type | Principal | Access | inherited from |
|---|---|---|---|
| Allow | Users (servername\Users) | Read | MACHINE\SOFTWARE |
| Allow | Administrators (servername\Administrators) | Full Control | MACHINE\SOFTWARE |
| Allow | SYSTEM | Full Control | MACHINE\SOFTWARE |
| Allow | CREATOR OWNER | Full Control | MACHINE\SOFTWARE |
| Allow | ALL APPLICATION PACKAGES | Read | MACHINE\SOFTWARE |
| Allow | SID | Read | MACHINE\SOFTWARE |
9. Save 'Permissions for KVS'
10. Run Enterprise Vault Operations Manager (EVOM) configuration and verify that it completes without issue.
Permanent Fix:
This issue has been fixed permanently in the product in Enterprise Vault 14.1.1.
Warning: Incorrect use of the Windows registry editor may prevent the operating system from functioning properly. Great care should be taken when making changes to a Windows registry. Registry modifications should only be carried-out by persons experienced in the use of the registry editor application. It is recommended that a complete backup of the registry and workstation be made prior to making any registry changes.
Issue/Introduction
Additional Information
