ISE posture: Launch Program Remediation failing

[clandrai]

Hello Community,

I have one issue where a customer is trying to launch a program as remediation action, but the AC Posture module fails to launch the program with an error:

"The requested application has not been qualified for launching. Please contact your system administrator"

Researching on this I found some reference of a same problem with old NAC agent, related to executable signature check:

https://search-prd.cisco.com/topic/news/cisco/cs/cse-dev-cleanaccess/dsc07876.html

And the case contains a PDF doc explaining how to sign a software and references to some registry keys needed fto get this work.

But nothing about that in any AC documentation.

Is it indeed a privilege/signature check issue or am I looking in the wrong direction?

Any help/advice most welcome.

Best regards,

Christophe

[clandrai]

BTW AC version being used is 4.4.02039

[hslai]

I would suggest to get the DART file and open a TAC case.

I was not able to find a pdf attached to either the discussion or the TAC case. Also, it seems the program in the TAC case signed properly and the issue was about the service account unable to launch a GUI from the CLI.

[clandrai]

Hi,

Indeed I made a mistake copying the link, the good one is:

http://mwz.cisco.com/615579147

and the PDF is here:

https://largefile-prod.cloudapps.cisco.com/getLargeFile/getLargeFile.php?srId=615579147&fileName=20100929-155210_Signing_Executables_To_Run_With_Agent_Stub.pdf

It was just surprising to see such an error and not find much documentation on the topic, after all the message suggests to contact the system administrator, who would better know what to do about it.

I will check into the DART at my next visit to the customer next week.