DGE Agent status shows "Waiting for Agent Connection"

A few comments and questions ...

- I assume Is this a fresh install and those are 7.0.2 agents?
- Is the DGE Service running as an account other than Local System? What about the agent?
- What OSs are both the DGE Server and agent running on?
- Is NTLM authentication disabled?
- Did you have a previous version of DGE v7.x installed in this environment?
- There is an override agent registry key that allows for direct connection to the DGE server (and doesn't search AD for the SCPs). Try setting the following on the agent and see if this has an impact: documents.software.dell.com/.../overrideserveruri

Hi Mathew,
Thanks for quick reply.

1. It's fresh D1IM DGE 7.0.2 installation
2. DGE server running on Service Account, same service account used for Agent to run. When i tried DGE Server to run with Local System account, Service is not stared. So used Service Account
3. Windows 2012 OS
4. NO Previous D1IM installed
5. I tried override agent, but having same issues

Agent Log says:

INFO: Listerning for service commands on '18530'
WARN: Failed to register with DGE Server. Will keep trying.

I appreciate your help.

Thanks,
Jaipal.

How did you install the Data Governance service? Did you use the Data Governance Configuration Wizard (i.e. C:\Program Files\Dell\One Identity Manager\Data Governance Configuration Wizard.exe) or did you install it manually?

The only reasons I can think of for the Data Governance service not to start correctly running as local system are as follows:

1. The service was deployed but not initialized (i.e. in the registry on the DGE Server you will see the following values under HKEY_LOCAL_MACHINE\SOFTWARE\Dell\Broadway\Server: "Q1IMDBConnectionString" and "QAMAuditActivityDBConnectionString" if either of those are empty, then the DGE service has not been initialized)
2. The service was deployed and initialized, but then the service was afterwards changed to run as a different account. This means that the encrypted connection strings in the database can no longer be decrypted and therefore the DGE service will fail to start.

The main reason for running the DGE service as an account other than Local System are if you are using Windows Authentication to your SQL Server instead of using SQL Authentication.

So understanding how you deployed the DGE Service to begin with, in conjunction with understanding the authentication to SQL Server you are using would help.

There are PowerShell commands available that can do the initialization of the DGE Service using the account it is running as (Initialize-QDataGovernanceServer and Initialize-QDataGovernanceActivity), but I wouldn't go that far right now.

My recommendation is to manually Remove the Data Governance Service from the machine, and then re-deploy using the Data Governance deployment wizard. It's a quick wizard and basically installs the service, creates the activity database (or, reuses the one you specify), and initializes the service with the connection to D1IM and to the DGE activity database. If you are not using SQL authentication and must run using Windows Authentication to SQL Server, then let us know.

Hi Mathew,
Both Q1IMDBConnectionString & QAMAuditActivityDBConnectionString encrypted strings exist in registry. DGE Service is running with no errors in DGE Server log file.

Currently i'm installed same version in Client environment as well as skytap environment. In client environment I'm using Windows Authentication and DGE Server Service configured to use Service Account, because Local System didn't work. But in Skytap Local windows working.

In both places i have installed DGE configuration while installing the product i.e wizard.

Thanks
Jaipal.

I would recommend that you open a support case for this. Ensure you attach the full agent logs and DGE server logs.

One final question. Is the agent in the client environment on the same machine as the DGE server? That may be an unsupported scenario.

Hi All
This issue has been resolved. There was another DGE Server instance running on other VM with lower version, which caused the issue. So uninstalled previous version DGE Server and removed object from Active Directory computers object.

Thanks Dell support team helping on t his issue.

Thanks,
Jaipal.

Hi Jaipal,

I am getting same error in Agent logs:
INFO: Listerning for service commands on '18530'
WARN: Failed to register with DGE Server. Will keep trying.

I have verified the DGE registry parameter as well.

Kindly let me know how to figure out if any other instance of DGE server instance is running and how to remove object from Active Directory computers object.

Thanks