Release Notes › Known Issues › General Known Issues › Windows Endpoint Known Issues

Windows Endpoint Known Issues

This section describes known issues for CA ControlMinder for Windows.

"CA Access Control for ActiveX" Appears in Add/Remove Programs

Valid on Windows

Symptom:

The following application appears in the Add/Remove Programs list:

CA Access Control for ActiveX

Solution:

This application belongs to CA ControlMinder, don't remove it.

General Tab on Endpoint Creation Screen Loses Information

Symptom:

On the Endpoint creation screen's General tab, I fill in the endpoint name, host, account name, and password. On the Information tab, I choose the owner or select administrative accounts. When I return to the General tab, the data I had already entered is lost.

Solution:

Click Submit on the General tab before filling in the Information tab.

Uninstall Does not Remove the Data and Log Directories

Valid on Windows

Symptom:

After I removed CA ControlMinder from the system I noticed that the uninstall process did not remove Data and Log directories from the following path:

\ProgramFiles\CA\AccessControl\

Solution:

The uninstallation process does not remove the Data and Log directories. You can manually remove them after the processes completed.

Microsoft Internet Explorer 7.0 Compatibility Issues with CA ControlMinder

Due to compatibility issues of Microsoft Internet Explorer 7.0 with CA ControlMinder, the browser may stop responding. To work around the issue, Install Microsoft Internet Explorer 8.0 or do the following:

Important! Apply Microsoft software patch KB957388 before you begin this procedure. You can download the software patch from the Microsoft web site.

1. Stop all CA ControlMinder services.
2. Open a command line window and run the following command:

   net stop cainstrm
   

3. Open the regedit utility from the Run command line window.
4. Navigate to the following path:

   HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSset\Services\cainstrm\parameters
   

5. Modify the ExcludeProcess registry entry value to include the iexplorer.exe file.
6. From the command line window, run the following command:

   net start cainstrm
   

7. Start the CA ControlMinder services.

Privileged Processes Can Save and Restore a Registry Tree Without Authorization

On Window Server 2003 and later, when a process obtains the special privileges SE_BACKUP_NAME and SE_RESTORE_NAME, it can save and restore a registry tree without CA ControlMinder authorization.

FIPS Only Mode on Windows x64

CAPKI 4.1.2 is now supported on x64 CA ControlMinder endpoint for Windows. However, due to a known issue with RSA, when running the CAPKI 4.1.2 in FIPS enabled mode, communication is significantly delayed.

Rename HOST Event in selang Marked as Unknown Event in CA User Activity Reporting Reports

A rename HOST event performed in selang is displayed as an unknown event in CA User Activity Reporting reports.