BSOD due to OneAgent Installation

[pshinde]

We deployed OneAgent on the Db server and it caused server reboot and BSOD . We removed the Agent and brought the server back normal . The question we got from platform is Did Dyantrace OneAgent install any driver on the server . We had this issue on 3 servers so far. Any input or solution appreciated.

[radek_jasinski]

The agent doesn't install any additional drivers on the monitored component's side.

It seems to me that the best solution in this case will be open a support ticket.

[Julius_Loman]

@Radosław J. On windows, Oneagent installs the oneagentmon driver which is responsible for injecting code into applications. See more here.

[Julius_Loman · Accepted solution]

I've encountered the same issue at one customer who has Windows servers hardened and they are running multiple host security tools. Our issue was BSOD during installation of oneagentmon driver and it was caused by McAfee SolidCore running on the host. Even the SolidCore was running in update mode (mode when changes to the system are allowed), BSOD occurred.

Finally, I've been able to locate the issue to memory protection mechanism in SolidCore which interfered with Oneagent installation. Our solution was to temporarily disable memory protection in SolidCore during Oneagent installation (also during upgrades). Memory protection could be turned back on after oneagentmon driver was installed.

In your case check the logs first, probably this will be similar situation and also look for any antivirus/hardening software running on the same host.

[skrystosik]

@Julius L.

ins't it oneagentmon device not driver? Driver is confusing name 🙂

[radek_jasinski]

I agree with the sentence that driver is confusing name

[Julius_Loman]

It's both 🙂 There is a oneagentmon device present in the system that is handled by the oneagentmon driver. At least this my understanding.

Dynatrace help glossary refers both device and driver:

https://www.dynatrace.com/support/help/get-started/reference/glossary/#o

[radek_jasinski]

You are right 🙂