After applying Microsoft patches released on 8/8/2006, Security Manager will not start properly. (NETIQKB54249)

  • 7754249
  • 02-Feb-2007
  • 19-May-2009

Situation

After applying Microsoft patches released on 8/8/2006, Security Manager will not start properly.

Receiving warning in Monitor Console: 'Log Manager: The LMService.exe is not running. Restarting.'

Analysis Console will not open.

Analysis Console not launching with an error that no central computer is running nqsmlm.

Analysis Console not starting.

Not able to authorize Unix agents.

Receiving an error about not being able to contact the Vulnerability Manager.

Event ID 31533: 'The NqSmLM is not running. Restarting.' This error occurs every 5 minutes in the Application log.

Resolution

How to test for the issue:

Start the NqSmLM.exe from command line using the following flag from {install directory}\NetIQ Security Manager\OnePoint:

NqSmLM.exe /start

This will start a console version of the process. If there is an issue creating the heap object, you will see a message on the console screen:

Error occurred during initialization of VM
Could not reserve enough space for object heap

That means the process failed to reserve the desired heap.

Note: If you cannot apply version 2 of KB 921883, then you will need to contact NetIQ technical support for a workaround.

Cause

Installation of MS06-040 (KB 921883) limits the contiguous memory available to applications.  This issue affects all central computers with greater than 2GB of RAM.

Note: As of the September 12th updates, Microsoft has fixed this issue with a revised version of their KB 921883.  Version 2 of this update resolves this problem and will not require any further changes.  To check if you have the updated revision, locate the KB in the add/remove problems control panel applet (make sure to select "show updates") and then click on 'Click here for support information'.  The updated KB will say version 2.

Additional Information

Formerly known as NETIQKB54249

Warning: Using the Registry Editor incorrectly can cause serious problems that may require you to reinstall your operating system. NetIQ Technical Support cannot guarantee that problems resulting from the incorrect use of the Registry Editor can be resolved. Make sure that you back up your Registry prior to making any changes.

For more information regarding the Microsoft patch MS06-040, please see http://support.microsoft.com/kb/921883/