|
Novell Lengthens Support on Several Key Products |
|
Please note that in a recent update published by Novell, they have opted to lengthen Extended Support for Novell NetWare 6.5 and Novell ZENworks 7 Suite by a year, to 30 September 2013. In addition, Novell BorderManager and Novell GroupWise 8 are extending General Support, and will be supported on NetWare 6.5 for the same time period.
Product Previous Support End Date New Support End Date
- NetWare 6.5 30 Sept 2012 (Extended Support) 30 Sept 2013 (Extended Support)
- ZENworks 7 30 Sept 2012 (Extended Support 30 Sept 2013 (Extended Support)
- GroupWise 8 1 May 2013 (General Support) 30 Sept 2013 (General Support)
- BorderManager 3.9 30 Sept 2012 (General Support) 30 Sept 2013 (General Support)
For the best value, Novell encourages upgrades to the latest release of Novell Open Enterprise Server and Novell ZENworks Configuraiton Management, but is offering Extended Support on these older releases to provide more deployment time for customers who need it.
The Extended Support phase of Novell's Product Support Lifecycle offers installation and configuration technical support and critical security fixes for customers with current maintenance on the replacement products - in this case Novell Open Enterprise Server 2 and Novell ZENworks Configuration Management 11.
Free Unlimited Extended Support on ZENworks 7 Suite
Current Novell Open Enterprise Server maintenance customers already realize free, unlimited 12x5 technical support during the Extended Support phase for NetWare. Effective 1 January 2012, Novell is offering this same free, unilmited 12x5 technical support benefit on ZENworks 7 Suite for all customers with current maintenance on Novell's ZENworks Configuration Management.
Product Information
- Novell NetWare 6.5 and Novell ZENworks 7 Suite Extended Support brings the following benefits through 30 September 2013:
- Continue to receive installation support while you plan and execute your upgrade from NetWare 6.5 to Open Enterprise Server on Linux, and from ZENworks 7 Suite to ZENworks 11
- Receive unlimited service requests 12 hours a day, 5 days a week from a Novell technical support engineer
Customers who are not current with maintenance may purchase Standard or Priority maintenance for licensed users and take advantage of Extended Support on ZENworks 7 Suite or NetWare 6.5 for free.
For further information
For detailed information on Novell's Support lifecycle, visit http://support.novell.com or contact Cindy DeHart, Novell & Virtualization Practice Manager at (540) 443-3392 or
This e-mail address is being protected from spambots. You need JavaScript enabled to view it

|
|
The HP Proliant G6-generation (and newer) servers have a new type of high-efficiency power supply that is sensitive to the waveform output of UPS units. If you find your UPS is not carrying the new G6 server (it immediately shuts down upon power loss), check the specifications of the UPS unit(s). The output must be True Sinewave. If it is anything else (Stepped Approximation to Sinewave is the usual alternative), then the server will not run on it.
If you need help with this or any other support issue, please don't hesitate to contact me at the ALI Technical Assistance Center at (540) 443-3398.
|
|
Droid 3 and Novell Data Synchronizer |
|
Contributed by Brian Ogden 2011-08-30
The Verizon Droid 3 phone is not supported by Novell Data Synchronizer due to the change in the phone software.
When you setup an account on the device, the certificate setting isn't visible on the initial screen. However, "Use a secure connection" and "Verify Certificate" is automatically enabled. Since we always use a self-signed certificate, this cert is not part of the trusted authority on the device. If you use the workaround below, you can setup an account that works, then uncheck verify certificates and switch to the config of the customer Novell Data Synchronizer.
Here is a workaround:
- Set-up a corp-sync or Exchange Activesync account
- Use your google account to create a corporate sync account . The prompt for server name should be “m.google.com” and the prompt for user name is your gmail address (the entire email address, not simply the first half/user part). So, as an example:
- Server: m.google.com
- Username:
This e-mail address is being protected from spambots. You need JavaScript enabled to view it
- After the account is created, go into settings -> accounts and select the EAS account created
- In the first screen, un-check the option "Verify Certificate"
- Change the credentials to the account needed
If you find you need more assistance with this issue, please don't hesitate to contact us!
ALI Technical Assistance Center (540) 443-3398
This e-mail address is being protected from spambots. You need JavaScript enabled to view it

|
|
Lexmark print spoolers conflicting with Windows |
|
Some Lexmark printer software and/or drivers can cause problems whereby the Print Spooler service conflicts with the Server service on Windows workstations and servers. Symptoms include very long (15 minute) waits on first starting Windows before it responds, as well as events logged in the System section of Event Viewer for "The Server service hung on starting". The Print Spooler is attempting to start at the same time, which causes Server service to hang.
The solution is to make the Print Spooler service dependent on the Server service, so it will not start until after the Server service is started.
- Click Start, and then click Run.
- In the Open box, type regedt32, and then click OK.
- Locate and click the following registry key:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Spooler
- Click Add Value on the Edit menu.
- Type DependOnService in the Value Name box.
- Click REG_MULTI_SZ in the Data Type box, and then click OK.
- Type LanmanServer in the Data box, and then click OK.
- Click Exit on the Registry menu to quit Registry Editor.
- Restart your computer.
For steps 4 through 7: If the "DependOnService" value already exists and has an entry, you can add another by double-clicking the value and entering it on a new line.
If you need help with this or any other support issue, please don't hesitate to contact me at the ALI Technical Assistance Center at (540) 443-3398.
Brice Stevens Advanced Logic Industries Technical Assistance Center (TAC)
This e-mail address is being protected from spambots. You need JavaScript enabled to view it
|
|
Intel Rapid Storage Driver Causing Windows Update Error on Certain HP PCs |
|
On HP workstations and laptops that use high-density (750GB-1TB) hard drives and are running Windows, older versions of the Intel Rapid Storage Technology driver can cause various problems including the inability to run Windows Update.
The error message will state that the Windows Update service is not started, but if you check it, it is running.
The solution is to download version 9.5.6.1001 (software package SP47845) or newer of the Intel Rapid Storage Technology driver from HP's support website.
If you need help with this or any other support issue, please don't hesitate to contact me at the ALI Technical Assistance Center at (540) 443-3398.
Brice Stevens Advanced Logic Industries Technical Assistance Center (TAC)
This e-mail address is being protected from spambots. You need JavaScript enabled to view it
|
|
How to handle the latest fake antivirus scheme |
|
Our TAC has recently been encountering another variation on the "fake antivirus/scanner/fixer/etc." plague of malware.
This one presents itself as Windows Repair and does the usual scare tactics of saying your workstation is infected, files/registry/hard drive sectors are damaged/missing, and so forth. This one, however, goes a step further and sets various folders--including the current user profile folder--to be Hidden. A telltale symptom, beyond the fake Windows Repair window, is a completely blank desktop with no program, file, or folder icons of any sort. This can make it seem as if you have lost everything.
Here's how you handle this:
Open an Explorer or My Computer window (use the WindowsKey-E combination if needed, or type explorer.exe into the Run command in the Start Menu)
Go to the Tools menu>Folder Options, then the View tab
Scroll down and choose the radio button to "Show hidden files and folders". This will let you see the items that the virus set to Hidden.
If you then right-click your user profile folder (under Documents and Settings for Windows XP, or under the Users folder for Windows Vista and 7) and choose Properties, you will see a checkbox for "Hidden" at the bottom. Uncheck that, and choose to apply to all files and folders when it gives you that option.
You may have to do this for several other folders, depending on what the virus touched, but again they should all show up once you choose to "Show hidden files and folders" as described above.
You'll also need to contact your IT support to update your virus protection. If you need assistance, please do not hesitate to contact us!
ALI Technical Assistance Center (TAC)
(540) 443-3398
|
|
GroupWise Alert: GWIA Vulnerability Fix |
GroupWise 8 & 7 users should check their security patches RIGHT AWAY! The GroupWise Internet Agent (GWIA) has a vulnerability.
If you need assistance with resolving this GWIA issue, please do not hesitate to contact our TAC.

Security Vulnerability - GroupWise 8 Internet Agent TZID (VCALENDAR) Variable Parsing
This document (7007638) is provided subject to the disclaimer at the end of this document.
EnvironmentNovell GroupWise 8 Novell GroupWise 8 Internet Agent
Affected versions: GroupWise 8.0x, 8.01x, 8.02, 8.02HP1 Previous versions (such as GroupWise 7.x) of GroupWise are likely also vulnerable but are no longer supported. Customers on earlier versions of GroupWise should, at a minimum, upgrade their GWIAs and associated Domains to version 8.02HP2 in order to secure their system.
SituationThe GroupWise Internet Agent (GWIA) has a vulnerability in the way that it parses the TZID variable within a received VCALENDAR message, which could potentially allow an unauthenticated remote attacker to execute arbitrary code on vulnerable installations of GWIA. This vulnerability affects GWIA running on all supported server OS platforms (Windows, SuSE Linux, & NetWare).
This vulnerability was discovered and reported by Anonymous working with TippingPoint's Zero Day Initiative (http://www.zerodayinitiative.com), ZDI-CAN-967
Novell bug 657818, CVE-2010-4325
ResolutionTo resolve this security issue, update GWIA to version 8.02 Hot Patch 2 (or later).
Bug Number657818
Document
| Document ID: |
7007638 |
| Creation Date: |
01-21-2011 |
| Modified Date: |
01-28-2011 |
| Novell Product: |
GroupWise |
Disclaimer
The Origin of this information may be internal or external to Novell. Novell makes all reasonable efforts to verify this information. However, the information provided in this document is for your information only. Novell makes no explicit or implied claims to the validity of this information. Any trademarks referenced in this document are the property of their respective owners. Consult your product manuals for complete trademark information. |
|
SUSE Linux Tip: Viewing Dynamic Leases |
|
Are you running DHCP on your OES 2 server? Would you like to view the DHCP leases in use? Well, now you can in OES 2 SP3!
Please contact the ALI TAC to schedule the upgrade and configure DHCP for this feature!

Viewing Dynamic Leases Under The DNS/DHCP Management Console From OES 2
This document (7006450) is provided subject to the disclaimer at the end of this document.
Environment
Novell DHCP Management Console
Novell DNS Management Console
Novell Open Enterprise Server 2 (OES 2) Linux Support Pack 3
Situation
Starting with OES 2 SP 3, administrators can view DHCP leases utilizing the DNS/DHCP management console; however, before doing so one of the following errors or messages may be encountered:
-
Configure the "DHCP server IP address" to view the leases
-
Configure the "omapi-key" setting of the DHCP server object to view the leases
-
Configure the following DHCP server settings to view the leases: DHCP Server IP address, omapi-key
-
ERROR: EOMAPI1
-
ERROR: DHCP server connection failed
Resolution
To address the "DHCP server IP address" portion of the message(s), do the following:
-
Launch the DNS/DHCP management console and login to the server (NOTE: Novell Client is no longer needed with the latest versions of the DNS/DHCP Java Management Console)
-
Click on the 'DHCP (OES Linux) tab toward the top of the console
-
Find the DHCP Server object at the bottom of the console and select it
-
Toward the top-right hand side of the console select the GENERAL tab and find the section called DHCP SERVER
-
Click the ADD button and enter the IP address of the DHCP server
-
Click on the SAVE button toward the top, left-hand side of the console (looks like a floppy disk)
To address the "omapi-key" portion of the message(s), do the following:
- The first step in addressing this issue is to create a TSIG key if one has not already been created.
-
NOTE: At the time this TID (Technical Information Document) was created, the secret for the TSIG key must be divisible by four (4). If it is not DHCP will not load. For instance, if the key's secret is set to SECRET then DHCP will fail to load as the secret is not divisible by four; however, if SECRET12 is used instead, then DHCP will load as the secret is now divisible by four.
-
Launch the DNS/DHCP management console and login to the server (NOTE: Novell Client is no longer needed with the latest versions of the DNS/DHCP Java Management Console)
-
Click on the 'DHCP (OES Linux) tab toward the top of the console
-
Highlight the SERVICE object (assuming it has already been created) and click on the CREATE button located at the top, left-hand side of the console (looks like a 3-dimensional box)
-
Select 'TSIG Key" and assign the KEY NAME and SECRET. Keep in mind the note above regarding the secret to make sure the number of characters used in the secret is divisible by four
-
After hitting CREATE on the key the key should show up under the service object that was highlighted
-
The second step in addressing this issue is to add the omapi-key setting itself
-
While in the DNS/DHCP management console, and with the 'DHCP (OES Linux)' tab selected, highlight the DHCP SERVER object toward the bottom of the console
-
Select the SETTINGS tab toward the top, right-hand side of the console (next to the GENERAL tab)
-
NOTE: At this point the administrator should see a setting for the OMAPI-PORT already configured for port 7911. If it is not there, the click the MODIFY button, find the setting, add it and assign it a port of 7911 (which is the default)
-
Click on MODIFY and find the OMAPI-KEY setting (likely at the bottom of the list). A drop down menu should appear after adding it, and a list of found TSIG keys should be presented. Select the appropriate key
-
Review the settings and make sure there is an OMAPI-PORT and OMAPI-KEY setting, each assigned a valid value
-
Click on the SAVE button toward the top, left-hand side of the console (looks like a floppy disk)
At this point it may be necessary to hit the TREE REFRESH button located at the top, left-hand side of the console. It is found next to the SAVE button. Once the tree refresh is complete, expand the SUBNET and then the POOL to view any current leases that may be assigned out. If one of the following errors is encountered, it is likely due to the fact that the leases file has not yet been populated with any leases. This error should resolve itself once there is a lease to be found in the dhcpd.leases file on the server:
NOTE: The 'omapi-port' and 'omapi-key' settings cannot be added, modified, or managed from iManager in any way at the time this TID was written. This has been reported to Engineering. The steps described in this TID should be completed from the DNS/DHCP Management Console.
|
|
HP Notebooks and Wireless Assistant Service issue |
|
Our TAC support desk has seen some recent instances of HP notebooks having CPU usage spikes that drive overheating because the HP Wireless Assistant service gets hung up.
If, on an HP laptop, the WMIPrvSE.exe process is causing repeated excessive CPU usage spikes (25% or more every few minutes) and thus overheating, try disabling the HP Wireless Assistant service.
(Start menu -> Control Panel -> Administrative Tools -> Services)
Some older versions of this software have this issue, though HP indicates the latest version is fixed for this bug.
The HP Wireless Assistant's only purpose seems to be to inform the user whether the wireless is on or off. However, if you find your wireless switch on your keyboard no longer works with the HP Wireless Assistant disabled, obtain the latest version from HP's website, uninstall the old first, then install the new.
If you need more help with this issue or would like other help with your technical support issues, please don't hesitate to contact us in the Technical Assistance Center!
Brice Stevens ALI TAC Support Lead (540) 443-3398
This e-mail address is being protected from spambots. You need JavaScript enabled to view it
|
|
Symantec Announces LiveUpdate Certificate Expiration |
|
Important LiveUpdate Certificate Expiration Notice
Problem
An older Symantec root certificate, SymRoot1, will expire on April 30, 2011. With an expired certificate, older LiveUpdate clients would no longer authenticate, download, or install content such as AntiVirus definitions or product updates.
Solution
To allow customers additional time to plan migrations, Symantec has introduced a workaround that allows LiveUpdate to continue to successfully authenticate valid content from Symantec through July 4, 2012. This date may be extended if needed on a product-by-product basis.
In addition, a newer Symantec root certificate, SymRoot2, will expire on August 23, 2020. Newer Symantec products and recently patched products are compatible with SymRoot2. All customers utilizing SymRoot1-based products are recommended to upgrade to SymRoot2-based products.
What is the impact of using SymRoot1 definitions after the certificate expiration?
The product will continue to download and install new updates, such as AntiVirus definitions and product updates. You do not need to do anything to continue to receive definitions for these products after the certificate expiration, but you are encouraged to upgrade to a version that supports SymRoot2 as soon as feasible.
Will products without SymRoot2 support still be able to use Intelligent Updater or Rapid Release to update definitions?
Yes, Intelligent Updater and Rapid Release definition packages will be signed by both SymRoot1 and SymRoot2.
Which products are affected?
The following table shows which product versions support SymRoot2 in green, which product versions will continue to receive SymRoot1 definitions after the certificate expiration in orange, and which product versions require an upgrade in red.
|
Product |
Version |
Status |
Action Needed | |
|
AntiVirus Corporate Edition |
10.1 MR 10 |
SymRoot2 Support |
None |
|
AntiVirus Corporate Edition |
10.x |
SymRoot1 Support |
Upgrade recommended |
|
AntiVirus Corporate Edition |
9.x |
No definitions after 4/30/2011 |
Upgrade required |
|
AntiVirus for Linux |
MR 10 |
SymRoot2 Support |
None |
|
AntiVirus for Linux |
MR 9 and earlier |
SymRoot1 Support |
Upgrade recommended |
|
AntiVirus for Macintosh |
10.x |
SymRoot2 Support with LiveUpdate 5.1.2 |
Update to LiveUpdate for Macintosh 5.1.2 |
|
Brightmail Gateway |
7.7 and later |
SymRoot2 Support |
None |
|
Brightmail Gateway |
5.x through 7.6 |
SymRoot1 Support |
Upgrade recommended |
|
Brightmail Message Filter |
All |
Does not use SymRoot |
None |
|
Client Security |
3.1 MR 10 |
SymRoot2 Support |
None |
|
Client Security |
3.x |
SymRoot1 Support |
Upgrade recommended |
|
Client Security |
2.x |
No definitions after 4/30/2011 |
Upgrade required |
|
Endpoint Protection |
12.0 / 11.0 |
SymRoot2 Support |
None |
|
Enterprise Security Manager |
10.x |
SymRoot2 Support |
None |
|
Enterprise Security Manager |
9.x and later |
SymRoot2 Support with LiveUpdate 3.3 |
Update to Windows LiveUpdate 3.3 |
|
Enterprise Security Manager |
6.5.x |
No definitions after 4/30/2011 |
Upgrade required |
|
IM Manager |
8.4.1.16 |
SymRoot2 Support |
None |
|
IM Manager |
Prior to 8.4.1.16 |
SymRoot1 Support |
Upgrade recommended |
|
LiveUpdate Administrator |
2.x |
SymRoot2 Support |
None |
|
LiveUpdate Administration Utility |
1.5 |
SymRoot1 Support |
Upgrade recommended |
|
Mail Security for Domino |
8.0.5 and later |
SymRoot2 Support |
None |
|
Mail Security for Domino |
8.0, 8.01, 8.02, 8.03 |
SymRoot1 Support |
Upgrade recommended |
|
Mail Security for Domino |
7.5 |
SymRoot2 Support |
None |
|
Mail Security for Domino |
5.x |
SymRoot1 Support |
Upgrade recommended |
|
Mail Security for Domino |
4.x and earlier |
No definitions after 4/30/2011 |
Upgrade required |
|
Mail Security for Domino MPE |
3.2 |
SymRoot1 Support |
Upgrade or Java LiveUpdate patch recommended |
|
Mail Security for Domino MPE |
3.0 |
No definitions after 4/30/2011 |
Upgrade required |
|
Mail Security for Exchange |
6.5 |
SymRoot2 Support |
None |
|
Mail Security for Exchange |
6.0.x |
SymRoot2 Support |
None |
|
Mail Security for Exchange |
5.0.x |
SymRoot1 Support |
Update recommended |
|
Mail Security for Exchange |
4.6 |
SymRoot1 Support |
Upgrade recommended |
|
Mail Security for Exchange |
4.5 and earlier |
No definitions after 4/30/2011 |
Upgrade required |
|
Mail Security for SMTP |
5.x |
SymRoot1 Support |
Upgrade recommended |
|
Scan Engine |
5.2.8 |
SymRoot2 Support |
None |
|
Scan Engine |
5.2.7 and earlier |
SymRoot1 Support |
Upgrade recommended |
|
Security Information Manager |
4.7 MP3 (release TBD) |
SymRoot2 Support |
None |
|
Security Information Manager |
4.7.2 and earlier |
No updates after 4/30/11 |
Upgrade required | |
My product version will not be updated. How do I upgrade?
If possible, Symantec recommends that you upgrade to a version that supports SymRoot2. SymRoot2 compatible products appear in green in the table above. You can download the latest version of your product from File Connect or from the Business Critical Services Web site.
For some products, you may need to apply patch instead of upgrading. For additional assistance, the Technical Assistance Center line is available to provide support (540) 443-3398 or contact your ALI representative for further assistance. |
|
|