KB44559 - Host checker fails with Error "Host checker didn't get installed properly. Your computer doesn't meet requirements" upon upgrade to Pulse Desktop Client 9.1R8.

Host checker fails with Error "Host checker didn't get installed properly. Your computer doesn't meet requirements" upon upgrade Pulse Desktop Client to 9.1R8+

This article describes an issue where Host Checker fails with Error "Host checker didn't get installed properly. Your computer doesn't meet requirements" upon upgrade Pulse Connect Secure or Pulse Desktop Client to 9.1R8+.

For Host checker configurations that have “Cache Cleaner” enabled, it is observed that Host Checker fails with Error "Host checker didn't get installed properly. Your computer doesn't meet requirements" upon upgrading the Pulse Desktop Client to 9.1R8+.

This issue occurs irrespective of the ESAP version, and when the Pulse Connect Secure (PCS) / Pulse Policy Secure (PPS) version is below 9.1R8.2.

This issue can be confirmed by checking the following log entry in the Pulse Client logs: 
 

3 SYSTEM PulseSecureService.exe EPCheck p5484 t158C JuniperSetupUtils.cpp:908 - 'dsGetFileVersion' C:\Program Files (x86)\Common Files\Pulse Secure\JUNS\PulseSecureService.exe version: 9, 1, 9, 4983 3 SYSTEM PulseSecureService.exe EPCheck p5484 t158C dsAYTCacheCleaner.cpp:83 - 'CdsAYTCacheCleaner::InitAYT()' C:\Program Files (x86)\Common Files\Pulse Secure\JUNS\PulseSecureService.exe version: 9, 1, 9, 4983 3 SYSTEM PulseSecureService.exe EPCheck p5484 t158C JuniperSetupUtils.cpp:908 - 'dsGetFileVersion' C:\Program Files (x86)\Common Files\Pulse Secure\TNC Client Plugin\dsCacheCleaner.dll version: 9, 1, 7, 6567 3 SYSTEM PulseSecureService.exe EPCheck p5484 t158C dsAYTCacheCleaner.cpp:87 - 'CdsAYTCacheCleaner::InitAYT()' C:\Program Files (x86)\Common Files\Pulse Secure\TNC Client Plugin\dsCacheCleaner.dll version: 9, 1, 7, 6567 3 SYSTEM PulseSecureService.exe EPCheck p5484 t158C JuniperSetupUtils.cpp:106 - 'dsCompareVersion()' ClientVersion: "9, 1, 9, 4983" ServerVersion: "9, 1, 7, 6567" 3 SYSTEM PulseSecureService.exe EPCheck p5484 t158C JuniperSetupUtils.cpp:131 - 'dsCompareVersion()' ClientVersion is greater, return 1 1 SYSTEM PulseSecureService.exe HostCheckerService p5484 t158C FTNCCCore.c:125 - 'TnccHandleException' An IMC threw an exception! Core dump created. Terminating.

From the log snippet above, you can see that cache cleaner is enabled as well as the Pulse Connect Secure (PCS) server version is below 9.1R8.2 (9.1R7 in this example).

The issue is fixed in the 9.1R8.2 PCS release.

Note : Both PCS and PDC need to be upgraded to at-least the 9.1R8.2 release for the fix.

To workaround the issue, please disable “Cache Cleaner” at Realm & Role Level on PCS/PPS by following the steps below: 

Realm Level : 

• Navigate to Users > User Realms
• Click on the desired Realm name.
• Select  Authentication Policy > Host Checker
• Uncheck "Evaluate Policies" & "Require and Enforce" against Cache Cleaner Policy
• Click on "Save Changes". 
• Repeat the above steps for all other User Realms. 

Role Level :

• Navigate to Users > User Roles
• Click on the Role name.
• Select General > Restrictions > Host Checker
• Ensure that "Cache Cleaner Policy" is not listed under the "Selected Policies" as shown below.
• Repeat the above steps for all other User Roles. 

 

Note: If the workaround doesn't help, please open a Support Case along with Pulse Detailed Logs.