Advanced Smart Control Network Configuration Scenarios

There are several ways to configure Smart Control Resource Managers. This document explains the more common configurations of SCRM to SCRM communication.  Connecting SCRMs will allow them to share client management responsibilities.

A Hierarchy Relationship makes one SCRM the Master and central license server while allowing sub servers to fully control their local clients. The difference between a Primary and Secondary SCRM is that only the Primary will facilitate licensing and product updates. This structure is most useful for organizations with remote locations.

A Helper Relationship gives all license, schedule, Energy Saver and ScreenView privileges to the Primary SCRM while allowing the Helper SCRM to control the Protection, Power and Miscellaneous commands to the client computers. This scenario is used when multiple administrators are sharing management of the same set of clients.
 

 

Peer Relationships gives all license, schedule, Energy Saver, and ScreenView privileges to the Primary SCRM of a subset while allowing a SCRM that is the Primary of a different subset to control the Protection, Power and Miscellaneous commands.These are used when administrators are sharing responsibilities over two separate subsets of machines.
 

Controlling Smart Shield from a Second Smart Control

Starting with version 2.1.10 SmartShield will have the ability to report to a second Smart Control. The primary Smart Control, which is the one entered at install or through the client configuration panel, will have the ability to assign a second Smart Control to a client. The Secondary Smart Control will receive keep-alive messages from the client and will be able to fully control the client including schedules and ScreenView. The only restrictions are that licenses and product updates must come from the primary Smart Control. This feature was created to facilitate management of clients from a local Smart Control and centralized Smart Control.

Due to many improvements made to speed up the TCP/IP communication in Smart Control Resource Manger the service is now loading much faster. Unfortunately, we have found that in some cases when rebooting, Smart Controls running version 2.1.8 on Windows 7 our service may be loading faster that the TCP/IP connection can handle. There is a simple solution to this problem. Windows 7 Smart Controls may need to slow down the service start up type to allow for the IP address to be registered in the service. To do this open the Service Control manager and change the Centurion Smart Control service startup type from Automatic toAutomatic (Delayed Start). Changing the service to Automatic (Delayed Start) will give the machine time register its IP address before listening for clients on all subsequent reboots.

We received a technical support phone call regarding the use of the command line functionality in Smart Shield. The customer had some issues getting command line to work when there was no user logged into the client machine. Once the user was logged in, the command line portion worked as they expected. Many times, the way we use and design our software is not the same as the way that our customers use and understand our software. Because of this mix up, we’re writing to explain changes to command line and expand on its use.

Starting with release 2.1.5 (released in October of 2010), the command line functionality was separated from the primary application into a separate application.

Before 2.1.5 release
c:\program files\centurion technologies\client\ctsrgui.exe
2.1.5 and After
c:\program files\centurion technologies\client\ctsrcmd.exe

For a list of commands available, navigate to the folder and type “ctsrcmd /h”

You may notice that some functionality for command line still works with the previous executible (ctsrgui.exe), however, going forward it will not be supported. Giving command line its own application makes it faster and allows us to include more functionality.

As always, call, email, or comment so we can know what you think or to clarify.

Hogan Haake
Support Manager

This step-by-step tutorial will assist users in getting Smart Shield and the Smart Control Resource Manager (SCRM) downloaded, installed and ready to use.

Start with the Smart Control Resource Manager
We recommend that the SCRM be installed on a machine with the following hardware and software specifications:

• Windows Server 2003/2008 or Windows 7/Vista/XP
• Windows Server 2003/2008 (for large scale enterprise level installations)
• Windows 7/Vista/XP will be adequate for environment of 500 clients or less
• Microsoft .NET Framework Version 2.0
• Microsoft Windows Installer 3.0
• Minimum Hardware Specifications
• 512 MB RAM
• Note: The RAM can be shared with the video card or other devices – SCRM requires that 512 MB should be devoted to the operating system. We recommend at least 2 GB of RAM
• Single Core 2 GHZ Processor
  Recommended dual core 2.8 GHZ Processor
• As the number of clients increases, so do the requirements for processing
• 100 MB Ethernet
• Wireless cards not recommended

Smart Control Resource Manager Installation Steps:

• Download the SCRM installer from
  http://www.centuriontech.com/support/login_customer_resources.php
• Be sure to download the appropriate installer for your computers
• Run the CCInstaller2.1.X.XXX.exe
• Type or paste in the license key that is given to you for SCRM
• Enter in the password that you have created for the SCRM.
  This password only applies to the SCRM.
  Used for allowing other SCRM computers to connect, as well as importing and exporting data
  If this is lost it cannot be recovered.
• This installer does require a reboot
• Port 25553
  SCRM and clients require port 25553 be available for TCP/IP communications
  Make sure all firewalls on the computers and the network allow port 25553
  If using Subnets or VLAN make sure that 25553 is allowed and if need be forwarded
• Proxy Server
  If your SCRM is behind a proxy, it may require manual licensing
  Locate the licensing option by right clicking the root node (“127.0.0.1”) in the SCRM user interface, then follow the instruction on the manual licensing tab.

Smart Shield Client Installation Steps:

• If you are using the SCRM, make sure that it is installed and running first and that you know the IP address or DNS name of that server.
• Smart Shield can be installed on Windows 7/Vista/XP Download the Smart Shield or Smart Shield Education installer from
  http://www.centuriontech.com/support login_customer_resources.php
• Be sure to download the appropriate installer for your computers
• It may be necessary to disable or allow Smart Shield in your antivirus software
• Run the SmartShield2.1.X.XXX.exe or SmartShieldEducation2.1.X.XXX.exe
• Enter in the Name or IP address of Smart Control if you are using managed licensing or the license key for stand alone
• Choose a password. Write this down and store in a safe place – it cannot be recovered. Password is lost it will require re-image of the client to remove protection
• Choose a keyboard and mouse unlock phrase
• Choose default or custom install to complete the installation
• If you receive any errors see the Trouble Shooting Section below
• Client requires a reboot in order for the disk driver and service to be loaded
• This may take a minute or two on the first reboot after install
• The client should now have the Smart Shield icon in the task bar and be showing connected in the Smart Control

Trouble Shooting:

Smart Control Resource Manager:

• Make sure that the license key has not been used to install on another server/computer.
• Make sure that the server/computer has an active internet connection.
• Check to make sure that the Centurion Smart Control service is started and set to Automatic.

Smart Shield Client:

• Is antivirus blocking/flagging ctsrgui.exe or ctsrsvc.exe?
• Allow exception in your antivirus for the following:
• ctsrsvc.exe
• ctsrgui.exe
• ctsrcmd.exe
• ctsrvnc.exe
• Do you have Fat32 partitions on the disc?
• Remove any partitions that are not NTFS
• Do you have at least 8 GB of free space on your C: drive?
• Has a previous version of Smart Shield been installed?
• Download and run the application at this link 
  http://www.centuriontech.com/tools/removeclient.zip
• Has a previous version of another Centurion product been installed?
• Download and run the script at this link
  http://www.centuriontech.com/support/downloads/scripts/Remove_CornerStone_or_DriveShield.bat

Still Have Questions?
Email: support@centuriontech.com
Phone: 1-800-224-7977

Centurion Technologies, manufacturer of the MacShield® computer protection product for Apple and Macintosh operating systems, has identified a fake antivirus malware, currently infecting computers connected to the Internet, that is using, without our permission, our trademark “MacShield.” Centurion Technologies, and our trademarked MacShield® computer protection product are not involved or associated in any way with those who are using our trademark to distribute their fake antivirus malware. Centurion Technologies’ MacShield® product includes our Reboot / Restore technology which was invented by us. The fake antivirus malware, which originally appeared using the name “MacDefender,” appears to be serially changing its name by adopting variations of names beginning with “Mac” in order to avoid detection

The following links provide more information regarding the fake antivirus malware, variously known as MacShield, MacDefender, MacProtector, MacSecurity, and MacGuard. Note that the following links lead to web sites external to this web site, and Centurion Technologies is not related to, is not associated with, and has no control over those external sites. Centurion Technologies is not responsible for any consequences from clicking on or navigating to the external web sites. You assume the risk of clicking on the following links.

1. New version of MacDefender scareware takes name of legit product MacShield
   (http://www.betanews.com/article/New-version-of-MacDefender-scareware-takes-name-of-legit-product-MacShield/1307136987?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+bn+%28Betanews+Full+Content+Feed+-+BN%29&utm_content=Google+International)
2. Remove Mac Shield (Uninstall Guide)
   (http://www.bleepingcomputer.com/virus-removal/remove-mac-shield)
3. How to Remove MacDefender
   (http://blogs.pcmag.com/securitywatch/2011/05/how_to_remove_macdefender.php)
4. MacDefender Screenshots… So Here’s What it Looks Like
   (http://update.pcantivirusreviews.com/news/2011/06/macdefender-screenshots-so-heres-what-it-looks-like.html)
5. MacShield the Same (Trojan) Horse by a Different Name
   (http://update.pcantivirusreviews.com/news/2011/06/macshield-the-same-trojan-horse-by-a-different-name.html)

Hogan Haake
Support Manager

Centurion Technical support has recently received reports of Smart Shield client machines with Windows XP that have services that are slow to load. Technical Support diligently went to work in our lab evaluating this report. Initial tests of the report did not produce slow loading of Smart Shield. Eventually we were able to reproduce this issue in our lab with some regularity. It was discovered that after installing a fresh Windows XP with all of the current Windows Updates, the machines started displaying the reported slow Windows service loading. This slow loading issue was not discovered sooner, because not all machines are slow to load. As part of the debugging process we also found that the event log showed a system error. The error was the following:

After researching the error, we found that this issue is fairly common when Windows XP machines execute software that involves disk protection or monitoring like Smart Shield or antivirus. Microsoft released a hot fix to correct this issue. Running the executable from the link below on the Smart Shield client machine while unprotected will restore automatic service start up speed. For further assistance please contact our technical support team, we are always happy to talk to our customers!

Please refer to the Microsoft article for additional details on this issue.http://support.microsoft.com/kb/888402

Below is the direct link to the hot fix. Microsoft warns against using this fix unless you find the above error in your event log!

http://hotfixv4.microsoft.com/Windows%20XP/sp3/Fix141412/2600/free/209635_ENU_i386_zip.exe

Centurion R&D

One of our customers recently brought to our attention that there is confusion about the USB classes listed in our USB blocking functionality. The customer wanted to know what would blocked when each class was blocked.

Unfortunately, providing a list of every USB device and what class they belong to is impossible. There are cases when a keyboard is more than just a keyboard. We have a USB keyboard in our office that also has a smart card reader built into it. If you were to try to block the keyboard using the “Human Input Devices (Keyboard/Mouse)” blocking, the keyboard and mouse input would be blocked, but the smart card reader on the keyboard would still function until the “Smart Card” class was also blocked.

There are also cases where a device may not be what it appears. A digital camera normally appears as a “Mass Storage Device” when hooked up to a computer to download photos. However, it is possible to control digital cameras via software. We have seen instances where a digital camera hooked up to a computer registers as a “Personal Healthcare” device.

Centurion recommends taking a cautious approach when blocking USB devices. Protecting your computers and your users should be your first priority if you are unsure. The advanced USB blocking screen has a “Defaults” button which takes care of most cases. When in doubt, test a specific device or call our technical support line for assistance. We are always happy to talk to our customers!

Now for the list of USB devices I promised. This list is edited from information on Wikipedia.

Hogan Haake
Support Manager

Scheduling using the SmartControl Resource Manager makes day to day maintenance of your hardware seamless. One of the most common uses of scheduling is Windows Updates. Smart Shield protection prevents changes from being applied to your computer. This means that even the changes you want to occur like Windows Updates. It would not make sense to make a special trip to each computer to unprotect each machine once they are unprotected to run your updates.

Sometimes doing windows updates can be time consuming for the machine and a technician who is monitoring the process. For example, if you have one hundred machines to run Windows Updates on and one person to do it. Also there is only a small time window for which to complete this task during normal business hours. With the presented scenario, how would you approach getting your computers updated? Automatic updates will require a reboot sometimes and that isn’t always an option. Also automatic updates won’t run if the machine is off.

With Smart Control and scheduling, this is a simple process. The scheduling feature will allow you to run Windows updates at any time you choose. If the computers will be off at the time you want to run the schedule, the Wake On Lan feature will wake the computers up. Here is an example schedule to do Windows updates.

If you have any questions about the scheduling process, please call your sales person or technical support. We are always happy to hear from and help our customer!

Demetrius Lovett
Tech Support

Hogan Haake
Support Manager