marklar23 Absent Member.
Absent Member.
2780 views

Slow Performance Weeks after Encryption

I encrypted my organization's laptops several weeks ago and did not return them to users until after I could tell by device performance that the bulk encrypting task had completed. I have two users that are experiencing extremely slow performance on their systems. When the users are typing anything like a Word document, upon each keystroke they see the Windows 7 "circle" icon at the mouse cursor. This seems to come and go several times over the week, and every few days we are getting a request to resolve the issue but after restarting the behavior may not act up anymore.

I found a TID suggesting to change HKLM\SOFTWARE\Novell-FDE\Parameters\ThrottleEncryption to a lower level like Idle or BelowNormal. Is there anything else that I should also try? Thanks!
0 Likes
19 Replies
bbeachem Absent Member.
Absent Member.

Re: Slow Performance Weeks after Encryption

Are these machines using Solid State harddrives?
0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: Slow Performance Weeks after Encryption

In ZCC on the devices that you are having issues with look at the Emergency
Recovery tab and see if you have multiple listings in here that corresponds
to the slowness. If so your devices are decrypting and then re-encrypting.
Your mention of being asked to reboot leads me to believe that is what is
happening to you.

I have had a few SRs going on this one for a while and it got bumped to
backend but no info in a month or so.

Jim Koerner
Server - ZCM 11.2.2 MU1 and Internal Database on Win2008R2x64
Client - ZCM 11.2.2 MU1 on Win7SP1x64 and WinXPx32

"marklar23" wrote in message
news:marklar23.5r0xpb@no-mx.forums.novell.com...


I encrypted my organization's laptops several weeks ago and did not
return them to users until after I could tell by device performance that
the bulk encrypting task had completed. I have two users that are
experiencing extremely slow performance on their systems. When the
users are typing anything like a Word document, upon each keystroke they
see the Windows 7 "circle" icon at the mouse cursor. This seems to come
and go several times over the week, and every few days we are getting a
request to resolve the issue but after restarting the behavior may not
act up anymore.

I found a TID suggesting to change
HKLM\SOFTWARE\Novell-FDE\Parameters\ThrottleEncryption to a lower level
like Idle or BelowNormal. Is there anything else that I should also
try? Thanks!


--
marklar23
------------------------------------------------------------------------
marklar23's Profile: http://forums.novell.com/member.php?userid=5123
View this thread: http://forums.novell.com/showthread.php?t=464262

0 Likes
marklar23 Absent Member.
Absent Member.

Re: Slow Performance Weeks after Encryption

You were able to lead me to dive in deeper and it looks like that even though a few of the laptops are saying locally that they are encrypted that on the server they are not identified as being encrypted. I'm going to verify ZCM component versions on these versus the systems that are working correctly as when I did the last update some of the components may have experienced update errors. If I see a problem I'll try removing and reinstalling a fresh version of ZCM Agent on them and try encrypting again to see if it fixes the issue and will post an update.
0 Likes
Bob-O-Rama
Visitor.

Re: Slow Performance Weeks after Encryption

We were finding this in instances where there were known conflicts between HP device drivers and the Novell piece. It would "install" but not activate till the workstations drivers were updated, via the usual HP provided driver updates. You should see an event log message to this effect when Zen initializes. Once the drivers were installed, on the next reboot, it all activates and will start the process. This may not be at all your problem, but sounds similar-ish.

-- Bob
0 Likes
bbeachem Absent Member.
Absent Member.

Re: Slow Performance Weeks after Encryption

The HP driver conflict is NOT with the FDE product and the two issues are not related. The fact that you can see the ZENagent running and downloading policies means you have not seen the HP drive guard issue.
0 Likes
Bob-O-Rama
Visitor.

Re: Slow Performance Weeks after Encryption

I never said I saw the agent downloading policies. We don't see the zenagent active on the workstation, it fails to install. In upgrade situations, the old agent is missing, the new agent cannot install. For example upgrading 10.3.x to 11.0.0 works. 11.0.0 --> 11.2.0 fails. It stays broken till the proper HP drivers are updated, then it seems as if the pre-agent kickstarts the installation and after a couple reboots you have the agent back.

The OP reported a disparity between the encryption status as seen in ZCC vs reality on the workstation, and errors in updating the ZCM agent.

My perhaps overly specific advice to the OP, more generalized, would be to ensure the zen agent is healthy, and when errors are reported, read them?

-- Bob
0 Likes
bbeachem Absent Member.
Absent Member.

Re: Slow Performance Weeks after Encryption

Can you please clarify what you mean by "locally they are encrypted" and "on the server they are not identified as being encrypted"? By locally, do you mean you are looking at the ZFDE Client About Box->Agent Status->FDE tab at the bottom (or just the main FDE CLient About box)? What are you looking at on the server that makes you think it's not encrypted?
thx
0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: Slow Performance Weeks after Encryption

Hi,

We have had (maybe) similar issues with our FDE setup that FDE policy assigned devices tend to loose the policy and start to do disk decryption and suddenly get once again the policy back and start to encrypt again. This could be found from "ZCM agent, Full disk encryption, about, Agents status, Settings, on section "Emergency Recovery Information" you could see events 'Zone Changed' what according to Novell support meant that the policy was "re-initialized / changed" even our policy counter have not changed = policy got lost in some phase.

We are now suspecting that there is some issues with the policy service that plays tricks on us.

-j-


>>> Jim Koerner<jim.koerner.DELETE.THIS@zeppelin-usa.com> 20.2.2013 19:57 >>>

In ZCC on the devices that you are having issues with look at the Emergency
Recovery tab and see if you have multiple listings in here that corresponds
to the slowness. If so your devices are decrypting and then re-encrypting.
Your mention of being asked to reboot leads me to believe that is what is
happening to you.

I have had a few SRs going on this one for a while and it got bumped to
backend but no info in a month or so.

Jim Koerner
Server - ZCM 11.2.2 MU1 and Internal Database on Win2008R2x64
Client - ZCM 11.2.2 MU1 on Win7SP1x64 and WinXPx32

"marklar23" wrote in message
news:marklar23.5r0xpb@no-mx.forums.novell.com...


I encrypted my organization's laptops several weeks ago and did not
return them to users until after I could tell by device performance that
the bulk encrypting task had completed. I have two users that are
experiencing extremely slow performance on their systems. When the
users are typing anything like a Word document, upon each keystroke they
see the Windows 7 "circle" icon at the mouse cursor. This seems to come
and go several times over the week, and every few days we are getting a
request to resolve the issue but after restarting the behavior may not
act up anymore.

I found a TID suggesting to change
HKLM\SOFTWARE\Novell-FDE\Parameters\ThrottleEncryption to a lower level
like Idle or BelowNormal. Is there anything else that I should also
try? Thanks!


--
marklar23
------------------------------------------------------------------------
marklar23's Profile: http://forums.novell.com/member.php?userid=5123
View this thread: http://forums.novell.com/showthread.php?t=464262
0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: Slow Performance Weeks after Encryption

Sounds like you have a SR going on this also. Have you heard anything on a
fix? Mine has been stagnant for a while and I just bumped it to see if
anything has been figured out or if more info is needed from my side. Hope
to here something soon. This is a pretty severe problem especially when it
happens multiple times to a machine.

Jim Koerner
Server - ZCM 11.2.2 MU1 and Internal Database on Win2008R2x64
Client - ZCM 11.2.2 MU1 on Win7SP1x64 and WinXPx32



"Jouko Oksanen" <Jouko.Oksanen_re@move_efore.fi> wrote in message
news:513713E9.13C8.00F6.0@move_efore.fi...
Hi,

We have had (maybe) similar issues with our FDE setup that FDE policy
assigned devices tend to loose the policy and start to do disk decryption
and suddenly get once again the policy back and start to encrypt again. This
could be found from "ZCM agent, Full disk encryption, about, Agents status,
Settings, on section "Emergency Recovery Information" you could see events
'Zone Changed' what according to Novell support meant that the policy was
"re-initialized / changed" even our policy counter have not changed = policy
got lost in some phase.

We are now suspecting that there is some issues with the policy service that
plays tricks on us.

-j-

>>> Jim Koerner<jim.koerner.DELETE.THIS@zeppelin-usa.com> 20.2.2013 19:57
>>> >>>

In ZCC on the devices that you are having issues with look at the Emergency
Recovery tab and see if you have multiple listings in here that corresponds
to the slowness. If so your devices are decrypting and then re-encrypting.
Your mention of being asked to reboot leads me to believe that is what is
happening to you.

I have had a few SRs going on this one for a while and it got bumped to
backend but no info in a month or so.

Jim Koerner
Server - ZCM 11.2.2 MU1 and Internal Database on Win2008R2x64
Client - ZCM 11.2.2 MU1 on Win7SP1x64 and WinXPx32

"marklar23" wrote in message
news:marklar23.5r0xpb@no-mx.forums.novell.com...


I encrypted my organization's laptops several weeks ago and did not
return them to users until after I could tell by device performance that
the bulk encrypting task had completed. I have two users that are
experiencing extremely slow performance on their systems. When the
users are typing anything like a Word document, upon each keystroke they
see the Windows 7 "circle" icon at the mouse cursor. This seems to come
and go several times over the week, and every few days we are getting a
request to resolve the issue but after restarting the behavior may not
act up anymore.

I found a TID suggesting to change
HKLM\SOFTWARE\Novell-FDE\Parameters\ThrottleEncryption to a lower level
like Idle or BelowNormal. Is there anything else that I should also
try? Thanks!


--
marklar23
------------------------------------------------------------------------
marklar23's Profile: http://forums.novell.com/member.php?userid=5123
View this thread: http://forums.novell.com/showthread.php?t=464262



0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: Slow Performance Weeks after Encryption

Yes, but nothing from Novell yet - I will keep pushing them forward and let you know if I get some results.

-j-


>>> Jim Koerner<jim.koerner.DELETE.THIS@zeppelin-usa.com> 8.3.2013 15:29 >>>

Sounds like you have a SR going on this also. Have you heard anything on a
fix? Mine has been stagnant for a while and I just bumped it to see if
anything has been figured out or if more info is needed from my side. Hope
to here something soon. This is a pretty severe problem especially when it
happens multiple times to a machine.

Jim Koerner
Server - ZCM 11.2.2 MU1 and Internal Database on Win2008R2x64
Client - ZCM 11.2.2 MU1 on Win7SP1x64 and WinXPx32



"Jouko Oksanen" <Jouko.Oksanen_re@move_efore.fi> wrote in message
news:513713E9.13C8.00F6.0@move_efore.fi...
Hi,

We have had (maybe) similar issues with our FDE setup that FDE policy
assigned devices tend to loose the policy and start to do disk decryption
and suddenly get once again the policy back and start to encrypt again. This
could be found from "ZCM agent, Full disk encryption, about, Agents status,
Settings, on section "Emergency Recovery Information" you could see events
'Zone Changed' what according to Novell support meant that the policy was
"re-initialized / changed" even our policy counter have not changed = policy
got lost in some phase.

We are now suspecting that there is some issues with the policy service that
plays tricks on us.

-j-


>>> Jim Koerner<jim.koerner.DELETE.THIS@zeppelin-usa.com> 20.2.2013 19:57
>>> >>>

In ZCC on the devices that you are having issues with look at the Emergency
Recovery tab and see if you have multiple listings in here that corresponds
to the slowness. If so your devices are decrypting and then re-encrypting.
Your mention of being asked to reboot leads me to believe that is what is
happening to you.

I have had a few SRs going on this one for a while and it got bumped to
backend but no info in a month or so.

Jim Koerner
Server - ZCM 11.2.2 MU1 and Internal Database on Win2008R2x64
Client - ZCM 11.2.2 MU1 on Win7SP1x64 and WinXPx32

"marklar23" wrote in message
news:marklar23.5r0xpb@no-mx.forums.novell.com...


I encrypted my organization's laptops several weeks ago and did not
return them to users until after I could tell by device performance that
the bulk encrypting task had completed. I have two users that are
experiencing extremely slow performance on their systems. When the
users are typing anything like a Word document, upon each keystroke they
see the Windows 7 "circle" icon at the mouse cursor. This seems to come
and go several times over the week, and every few days we are getting a
request to resolve the issue but after restarting the behavior may not
act up anymore.

I found a TID suggesting to change
HKLM\SOFTWARE\Novell-FDE\Parameters\ThrottleEncryption to a lower level
like Idle or BelowNormal. Is there anything else that I should also
try? Thanks!


--
marklar23
------------------------------------------------------------------------
marklar23's Profile: http://forums.novell.com/member.php?userid=5123
View this thread: http://forums.novell.com/showthread.php?t=464262
0 Likes
bbeachem Absent Member.
Absent Member.

Re: Slow Performance Weeks after Encryption

Engineering is actively working on Jouko's SR. Jim, can you make sure Shaun has your SR number and he'll reach out to me so I can look into who's supposed to be working with you. The symptoms sound the same as Jouko's and others, but I'd like to have engineering review the logs/setup to confirm that. My apologies that this appears to have been dropped.
0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: Slow Performance Weeks after Encryption

Finally got some feedback on my SR. Supposedly this is fixed in 11.3 and it
going to be back ported to 11.2 but no timeframe. Don't think there is a
TID on any of this at this point which would be good for people trying to
hunt this problem down.

Jim Koerner

"bbeachem" wrote in message news:bbeachem.5sgfvb@no-mx.forums.novell.com...


Engineering is actively working on Jouko's SR. Jim, can you make sure
Shaun has your SR number and he'll reach out to me so I can look into
who's supposed to be working with you. The symptoms sound the same as
Jouko's and others, but I'd like to have engineering review the
logs/setup to confirm that. My apologies that this appears to have been
dropped.


--
bbeachem
------------------------------------------------------------------------
bbeachem's Profile: http://forums.novell.com/member.php?userid=103657
View this thread: http://forums.novell.com/showthread.php?t=464262

0 Likes
shaunpond Absent Member.
Absent Member.

Re: Slow Performance Weeks after Encryption

Jim,

what's the SR #?

--

Shaun Pond


0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: Slow Performance Weeks after Encryption

Shaun,
The SR is 10811243111

Jim Koerner

"Shaun Pond" wrote in message
news:VA.000108fe.000f3e47@no-mx.forums.novell.com...

Jim,

what's the SR #?

--

Shaun Pond

0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.