Duplicate Client Security or Server Security hosts in the Policy Manager domain tree after upgrade or reinstallation

Issue:

After an upgrade or reinstallation of a WithSecure Client Security or Server Security client, why are there duplicate hosts visible in the WithSecure Policy Manager Server's domain tree?

Resolution:

If you are using the method "Randomly generated global unique ID" to create a host identification string, it may happen that after a reinstallation or upgrade of a Client Security or Server Security client, this identification string is regenerated and the client is effectively seen as a new host in the WithSecure Policy Manager Server's domain tree. This is why the device can be seen twice in the domain tree.

This can also happen if you have selected a different host identification method for the upgrade than what was used during the installation of the client on the host. The host identification method is chosen when exporting the installation package, in the "Configure communication with Policy Manager Server" step.

To view which host identification method was used on a host, follow the steps below:

1. Open a command prompt as an administrator on the host
2. Navigate to : 
   C:\Program Files (x86)\F-Secure\Client Security or
   C:\Program Files (x86)\F-Secure\Server Security
3. Run command: RESETUID.EXE SHOWUID

Depending on the settings in your WithSecure Policy Manager Server, the older host will be seen as disconnected after the defined number of days. 
After another defined period of days, it will be removed from the domain tree of your WithSecure Policy Manager Server.

You can change these settings by following the steps below:

1. Log in to the Policy Manager Console
2. Click Tools > Server configuration

In the Hosts tab, you can change after how many days hosts should be considered disconnected. You can also enable to automatically remove disconnected hosts after a defined number of days.