No communication between RES ONE Workspace Relay server and RES ONE Workspace Agents after installing Security Updates mentioned in Microsoft Security Bulletin MS16-065

Version 1

    Problem


    No communication possible between RES ONE Workspace Relay Server and RES ONE Workspace Agents after installing Security Update for .NET Framework (3156757),
    mentioned in Microsoft Security Bulletin MS16-065:

    https://technet.microsoft.com/en-us/library/security/ms16-065.aspx

    The following issues can be seen when installing the hotfix;
    • In the RES ONE Workspace Console Error log and the RES Trace "ERROR: 9 - Subscript out of range" is reported by RES.exe, PWRCACHE.exe or RESOP.exe.
    • RES ONE Workspace Console no User Sessions are reported even though users are logged on.
    • No logs are uploaded to the RES ONE Workspace database but the RES ONE Workspace Agent Service is running and responds to restart commands given.
    • In Task Manager multiple pwrcache.exe processes can be seen, and increase in numbers when restarting the RES ONE Workspace Agent Service.
    • RES ONE Workspace Relay Servers updates correctly on the configured interval but agents do not.
    The Error is reported by the RES ONE Workspace Manager Agent but the problem is caused by the Microsoft hotfix that is installed on the RES ONE Workspace Relay Server.

    NOTE:

    All versions of RES ONE Workspace and RES Workspace Manager are affected!


     

    Cause


    The installation of the Security Update for .NET Framework causes changes in the communication between RES ONE Workspace Relay server and RES ONE Workspace Manager Agent.
    The following Microsoft updates were known to be related to Security Bulletin MS16-065:

    KB3142023, KB3142024, KB3142025, KB3142026, KB3142030, KB3142032, KB3142033, KB3142035, KB3142036, KB3142037, KB3156387, KB3156421

    The RES ONE Workspace Manager Agent is not prepared for this change and stops communicating.


     

    Solution

    Solution: Install at least RES ONE Workspace 2015 SR2

    This issue is resolved in RES ONE Workspace 2015 SR2.

    In case the Service Release is not (yet) available or in case the Service Release cannot be installed, a revision containing this update is available on request at RES Support.

    IMPORTANT: A revision contains multiple fixes. Only apply this revision when you are experiencing a specific problem. Unless you are severely impacted by this specific problem, RES Software recommends that you wait for the next service release containing these fixes.

    NOTE: The agent requires an update to be able to communicate with the Relay Server. It is recommended to update the Relay Server as well.

    If an update to at least RES ONE Workspace 2015 SR2 is not possible at the moment, the following workarounds can be applied.

    Workaround 1:
     
    Microsoft has described steps to revert to the old behavior for the TLS/SSL protocol https://support.microsoft.com/en-us/kb/3155464

    On the RES ONE Workspace Relay Server perform the following;

    Step 1: Disable SCH_SEND_AUX_RECORD structure for individual applications
    For RelayServer.exe, add the following registry subkey:
    Registry location:
    HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\<version_number>\System.Net.ServicePointManager.SchSendAuxRecord

    DWORD name: C:\Program Files\RES Software\Workspace Manager\Relay Server\RelayServer.exe
    Value data: 0
     

    Step 2: Restart the "RES ONE Workspace Relay Server" service
    Open a  Command Prompt on the RES ONE Workspace Relay Server
    Type "net stop RESRLS" and press enter
    Type "net start RESRLS" and press enter

     
    Step 3: Restart the RES ONE Workspace Agents
    Either restart the RES ONE Workspace Agent service or reboot the entire machine

    Workaround 2:

    Remove the update from the RES ONE Workspace Relay Server and Agents. We recommend to apply this workaround only for a short term. After installing at least RES ONE Workspace 2015 SR2 the updates can be installed again.
     
    Step 1: Remove the update from the RES ONE Workspace Relay Server
    Find the KB in the Microsoft Security Bulletin MS16-065 that applies to your environment. Below is the list of KB's mentioned in the Bulletin.
    KB3142023, KB3142024, KB3142025, KB3142026, KB3142030, KB3142032, KB3142033, KB3142035, KB3142036, KB3142037, KB3156387, KB3156421\

    Step 2: Restart the RES ONE Workspace Relay Server
    Reboot the RES ONE Workspace Relay Server to finish uninstalling the Microsoft KB

    Step 3: Remove the update from the RES ONE Workspace Agents
    Follow the same procedure as for the RES ONE Workspace Relay Server

    Step 4: Reboot the RES ONE Workspace Agents
     
    Reboot the RES ONE Workspace Relay Server to finish uninstalling the Microsoft KB