Version

Argent Advanced Technology 5.1A-1807-A and below

Date

Monday, 17 September 2018

Summary

When using System Down Rule with Failover Cluster WMI Provider to monitor Windows 2016 Cluster, Engine could not determine state of Cluster object

Following is an example of Rule testing result:

Could not get state for cluster group ‘Available Storage’ of cluster ‘NUCCLU’ for Node ‘Available Storage’

New option ‘Failover Cluster WMI Provider (Encrypted)’ is implemented to address the issue:

Click For Full Size

This issue has been addressed in Argent Advanced Technology 5.1A-1810-A

Technical Background

When Argent Advanced Technology Engine connects WMI service at Cluster Nodes, it must negotiate an acceptable authentication level

Due to changes in Windows 2016 Cluster, this requires authentication level to be pktPrivacy

According to Microsoft document, it means ‘Authenticates all previous impersonation levels and signs and encrypts each data packet

This ensures that all communication between the client and the server is confidential’

As a result, Argent Advanced Technology Engine could not communicate with default authentication level

The new option ‘Failover Cluster WMI Provider (Encrypted)’ allows setting the security parameters appropriately

Resolution

Upgrade to Argent Advanced Technology 5.1A-1810-A or above