Bug ID 668247: Machine Certificate Checker service may not be used when UAC is disabled on windows machine

Last Modified: May 01, 2019

Bug Tracker

Affected Product:  See more info
APM-Clients APM(all modules)

Known Affected Versions:
12.1.0, 12.1.0 HF1, 12.1.0 HF2, 12.1.1, 12.1.1 HF1, 12.1.1 HF2, 12.1.2, 12.1.2 HF1, 12.1.2 HF2, 12.1.3, 12.1.3.1, 12.1.3.2, 12.1.3.3, 12.1.3.4, 12.1.3.5, 12.1.3.6, 12.1.3.7, 12.1.4, 12.1.4.1, 13.0.0, 13.0.0 HF1, 13.0.0 HF2, 13.0.0 HF3, 13.1.0, 13.1.0.1, 13.1.0.2, 13.1.0.3, 13.1.0.4, 13.1.0.5, 13.1.0.6, 13.1.0.7, 13.1.0.8, 13.1.1, 13.1.1.1, 13.1.1.2, 13.1.1.3, 13.1.1.4, 13.1.1.5

Fixed In:
13.0.1

Opened: Jun 07, 2017
Severity: 3-Major

Symptoms

Machine Certificate Checker service may not be used when UAC is disabled on windows machine causing Machine Cert Auth to either fail or go to 'Found' branch

Impact

Machine Cert Auth agent either fails or goes to 'Found' branch

Conditions

Machine Certificate Checker is installed. Access Policy has Machine Cert Auth configured. Windows machine has UAC disabled.

Workaround

Enable UAC or Use elevation helper app (requires user to be an local admnistrator).

Fix Information

Previously, on Windows, the Machine Certificate service was not used when UAC was disabled. Now, the Machine Certificate is used even when UAC is disabled.

Behavior Change