Error in Password Capture Agent service: "Service VSS not available" (4374085)

Error in Password Capture Agent service: "Service VSS not available"

Error message received:

"Fatal error:
System-Code: 1722 (0x6BA)
Working loop of thread 'CEnabler' ended unexpectly with error:
This worker thread's endless loop must be terminated due to the following incurable error:
Config could not be loaded:
Configuration: Connection to companion service failed:
Companion service could not connected:
Proof of requirements negativ:
Special treatment for VSS NTDS Writer has failed:
Service 'VSS' is not available!"

This error comes from the special treatment for the VSS-NTDS writer that was built into PCA 2.0.1.8.

This issue exists when the VSS-NTDS writer exists*, but is not (yet) running, even after the PCA has been fully initialized and has waited at least three minutes extra for it.  After the server is completely started, the VSS is not there and hangs still.

(*) the VSS NTDS Writer is available for the PCA if:

Detection of MS VSS NTDS Writer as follows:

1. Service "NTDS" must be present AND with the following attributes:

SERVICE_NAME: NTDS
TYPE: 0x20 (SERVICE_WIN32_SHARE_PROCESS)
START_TYPE: 0x2 (SERVICE_AUTO_START)
BINARY_PATH_NAME: <the current process = PCA> (= "lsass.exe")

- and -

2. Service "VSS" must be present AND with the following properties:

SERVICE_NAME: VSS
START_TYPE: 0x2 (SERVICE_AUTO_START) or 0x3 (SERVICE_DEMAND_START)

- and -

3. Server has the role "Active Directory Domain Services" (AD DS) installed.

Modify the below registry value so that the check for the presence of the NTDS-VSS is switched off and the PCA then starts without waiting for the NTDS-VSS.

 

NotDetectVssNtdsWriterHKEY_LOCAL_MACHINE\SOFTWARE\One Identity\One Identity Manager\Password Capture Agent\Driver\\NotDetectVssNtdsWriter = 1