Summary

When deploying a policy to Apex One, the policy status just shows "Pending: Managed Server deploying".

Root Cause Analysis

The issue occurs if the Hostname doesn't match in OfcUninst.txt and Ofcscan.ini. This may happen if the customer changed the Server's Hostname after installing Apex One server.

• Verify by comparing the value for Master_DomainName in the ofcscan.ini, and the InstallWorkstation in the ofUninst.ini.
   

  By default, the ofcscan.ini and ofUninst.ini files are located in the Apex One installation directory: ..\Trend Micro\OfficeScan\PCCSRV\.

   

  

• The website certificate is issued to the IP address, but not the hostname. The Apex One server website's certificate can be checked through the MMC, under Trusted People > Certificates.

  

• The following can be seen in the Apex One ofcdebug.log, located in ..\Trend Micro\OfficeScan\PCCSRV\Log\:

  2019 08/28 18:42:43 [0c04 : 1764] (00) (I) []ofcservice.exeOSFSvcClient::setOSFServiceInfo - http url=https://apexone45:4343/officescan/osfwebapp/api/v1/SystemCall - libosfsvcclient.cpp(226)
  2019 08/28 18:42:43 [0c04 : 1764] (00) (D) []ofcservice.exegetPFXFromCertificateStore - >>> find certificates and export PFX from keystore=OfcOSF by subject=OfcOSFWebApp - libosfsvcclientutility.cpp(260)
  2019 08/28 18:42:43 [0c04 : 1764] (00) (D) []ofcservice.exegetPFXFromCertificateStore - find one certificat matches the subject name=OfcOSFWebApp - libosfsvcclientutility.cpp(293)
  2019 08/28 18:42:43 [0c04 : 1764] (00) (D) []ofcservice.exegetOfcServerCertificate - encrypted roleSvc= - libosfsvcclientutility.cpp(109)
  2019 08/28 18:42:43 [0c04 : 1764] (00) (D) []ofcservice.exegetOfcServerCertificate - roleSvc=0 - libosfsvcclientutility.cpp(115)
  2019 08/28 18:42:43 [0c04 : 1764] (00) (D) []ofcservice.exegetCertificateFromCertificateStore - >>> query all certificates from keystore=TrustedPeople by subject=apexone45 - libosfsvcclientutility.cpp(202)
  2019 08/28 18:42:43 [0c04 : 1764] (00) (E) []ofcservice.exegetCertificateFromCertificateStore - failed to find certificate in store, store=TrustedPeople, subjectName=apexone45 - libosfsvcclientutility.cpp(245)
  2019 08/28 18:42:43 [0c04 : 1764] (00) (I) []ofcservice.exegetCertificateFromCertificateStore - totally query 0 certificates - libosfsvcclientutility.cpp(253)
  2019 08/28 18:42:43 [0c04 : 1764] (00) (I) []ofcservice.exeBoostHTTPContext::prepareContext - prepare context scheme=https, host=apexone45, port=4343, target=[/officescan/osfwebapp/api/v1/SystemCall] - libosfsvcclienthttpcontext.cpp(236)
  2019 08/28 18:42:43 [0c04 : 1764] (00) (E) []ofcservice.exeBoostHTTPContext::prepareContext::::operator () - exception: no local certificate for peer verification - libosfsvcclienthttpcontext.cpp(189)
  2019 08/28 18:42:43 [0c04 : 1764] (00) (E) []ofcservice.exeBoostHTTPContext::prepareContext::::operator () - verify_peer() all(0/0) failed for host=apexone45 - libosfsvcclienthttpcontext.cpp(195)
  2019 08/28 18:42:43 [0c04 : 1764] (00) (E) []ofcservice.exeBoostHTTPClient::sendHTTPRequest - failed to send http request err=[handshake: certificate verify failed] - libosfsvcclienthttpclient.cpp(35)