Scheduled scans return zero assets

When a scan configuration is run using the run now button, the scan will run as expected.  When a scan configuration is run on a schedule, the scan will exit early with a success message, but find zero assets.  Talk to Entrust support about installing an update that fixes the issue.

Powering off the database master node causes Discovery to display 0 plugins

In a 2-node cluster setup, when the master database node is shut down or not available, the database becomes read-only. The Discovery UI will not populate the user interface with plugins, scan configurations or other information. Preferably the user should see the configurations but not make changes.  The workaround is to remove the failed node from the cluster.

Discrepancy in discovered assets

You may notice a difference between the number of assets displayed in the Discovery UI and those appearing in CSP Compliance Manager. This occurs because:

• Discovery plug-ins return all scan results even if some important information, like the certificate or public key, is missing.  Those results won't register.
• Discovery plug-ins may find the same asset multiple times; KCM counts it only once per plugin.

As a result, the asset count in CSP Compliance Manager may be lower than what the Discovery UI reports.