Problem
Many users are seeing an "Antivirus protection expired" message with the only options being to Renew or Uninstall. They cannot click on anything else while the error is on the screen. Our Kaseya shows an expiration date of next year.
Running an update from the VSA does not resolve the issue.
Cause
The license is good on the endpoint for 94 days and then gets renewed when there are less than 60 days left from the main key on the VSA. There is a daily job run on the VSA to update the main key every 90 days.
Checking the Security logs on the VSA in this folder shows the error;
$:\Kaseya\Logs\1\
SecurityLogsMain.txt error;
9/2/2019 8:01:39 AM, Error, "P10-KASEYA-01", "Kaseya Plugin Host Service", "Daily Job - Update Kaspersky License File: There was no endpoint listening at https://sec-update-lic.kaseya.com/KasLicense/Service.asmx that could accept the message. This is often caused by an incorrect address or SOAP action. See InnerException, if present, for more details.
Server stack trace:
at System.ServiceModel.Channels.HttpOutput.WebRequestHttpOutput.GetOutputStream()
at System.ServiceModel.Channels.HttpOutput.Send(TimeSpan timeout)
at System.ServiceModel.Channels.HttpChannelFactory`1.HttpRequestChannel.HttpChannelRequest.SendRequest(Message message, TimeSpan timeout)
at System.ServiceModel.Channels.RequestChannel.Request(Message message, TimeSpan timeout)
at System.ServiceModel.Dispatcher.RequestChannelBinder.Request(Message message, TimeSpan timeout)
at System.ServiceModel.Channels.ServiceChannel.Call(String action, Boolean oneway, ProxyOperationRuntime operation, Object[] ins, Object[] outs, TimeSpan timeout)
at System.ServiceModel.Channels.ServiceChannelProxy.InvokeService(IMethodCallMessage methodCall, ProxyOperationRuntime operation)
at System.ServiceModel.Channels.ServiceChannelProxy.Invoke(IMessage message)
Exception rethrown at [0]:
at System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessage reqMsg, IMessage retMsg)
at System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(MessageData& msgData, Int32 type)
at SEC.Common.KasperskyLicenseService.ServiceSoap.GetKeyFileNames(GetKeyFileNamesRequest request)
at SEC.Common.KasperskyLicenseService.ServiceSoapClient.GetKeyFileNames()
at SEC.Common.License.AVLicenseFileUpdater.CheckForNewLicense()
at SEC.Common.DailyJob.Process()", "", "", NULL
9/3/2019 8:01:28 AM, Error, "P10-KASEYA-01", "Kaseya Plugin Host Service", "Daily Job - Update Kaspersky License File: There was no endpoint listening at https://sec-update-lic.kaseya.com/KasLicense/Service.asmx that could accept the message. This is often caused by an incorrect address or SOAP action. See InnerException, if present, for more details.
Server stack trace:
at System.ServiceModel.Channels.HttpOutput.WebRequestHttpOutput.GetOutputStream()
at System.ServiceModel.Channels.HttpOutput.Send(TimeSpan timeout)
at System.ServiceModel.Channels.HttpChannelFactory`1.HttpRequestChannel.HttpChannelRequest.SendRequest(Message message, TimeSpan timeout)
at System.ServiceModel.Channels.RequestChannel.Request(Message message, TimeSpan timeout)
at System.ServiceModel.Dispatcher.RequestChannelBinder.Request(Message message, TimeSpan timeout)
at System.ServiceModel.Channels.ServiceChannel.Call(String action, Boolean oneway, ProxyOperationRuntime operation, Object[] ins, Object[] outs, TimeSpan timeout)
at System.ServiceModel.Channels.ServiceChannelProxy.InvokeService(IMethodCallMessage methodCall, ProxyOperationRuntime operation)
at System.ServiceModel.Channels.ServiceChannelProxy.Invoke(IMessage message)
Exception rethrown at [0]:
at System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessage reqMsg, IMessage retMsg)
at System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(MessageData& msgData, Int32 type)
at SEC.Common.KasperskyLicenseService.ServiceSoap.GetKeyFileNames(GetKeyFileNamesRequest request)
at SEC.Common.KasperskyLicenseService.ServiceSoapClient.GetKeyFileNames()
at SEC.Common.License.AVLicenseFileUpdater.CheckForNewLicense()
at SEC.Common.DailyJob.Process()", "", "", NULL
Resolution
This URL needs to be a whitelist for the VSA to access the Kaspersky Security license server.