How to Modify Registry Filters Using the Command Line Utility

Follow

Summary

This Knowledgebase article provides instructions for using the Command Line Utility to create registry filters for Neverfail Heartbeat.

CONFIDENTIAL ! This Knowledgebase Article is for NCIE certified personnel only.
There will be NO SUPPORT for changes made by non-NCIE certified personnel.

More Information

Restrictions

The utility may only be used to add filters for keys under the following registry hive:

HKEY_LOCAL_MACHINE\SOFTWARE\VendorName

You may only add filters below the SOFTWARE hive.

WARNING ! Under no circumstances should the following be added: HKEY_LOCAL_MACHINE\SOFTWARE\**
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\**

Adding filters for other locations (HKEY_CLASSES_ROOT, HKEY_CURRENT_USER, HKEY_USERS, HKEY_CURRENT_CONFIG) is NOT supported. This utility does NOT provide checks to enforce these restrictions, so it is the responsibility of the engineer reading this Knowledgebase article to comply with this restriction.

If an incorrect registry filter is added, Neverfail will not be able to perform any Registry check and the 'Registry Sychronization Status' in the Neverfail Management Client will show 'Out of synch'.
Addtionally, the following warning message will be logged in the Neverfail logs:

[ControllerThread](com.neverfail.amfx.AMFramework) - Unable to update effective filters in Registry State Manager com.neverfail.helper.error.NFException: [B4]Filters must be specified in terms of HKEY_LOCAL_MACHINE and HKEY_USERS only


Procedure

To add a filter for an existing registry key already in place, perform the follow the steps:

  1. Verify the existence of the key location to be replicated.
  2. Shutdown Neverfail Heartbeat.
  3. Open a command prompt:
    1. Navigate to \Neverfail\R2\Bin
    2. Enter nfappendregfilters <filter>
  4. Restart Neverfail.
  5. After registry synchronization completes, verify the existence of the key location on the Passive server.

If removing a filter for an existing registry key already in place, perform the following steps:

  1. Shutdown Neverfail.
  2. Open a command prompt:
    1. Navigate to \Neverfail\R2\Bin
    2. Enter nfremoveregfilters <filter>
  3. Restart Neverfail.

Examples:

To protect the software configuration present in the registry for the vendor ACME , product name Test :

$prompt> cd <drive>:\neverfail\r2\bin
$prompt> nfappendregfilters HKEY_LOCAL_MACHINE\SOFTWARE\ACME\TEST\**

To remove protection for the software configuration present in the registry for the vendor ACME , product name Test :

$prompt> cd <drive>:\neverfail\r2\bin
$prompt> nfremoveregfilters HKEY_LOCAL_MACHINE\SOFTWARE\ACME\TEST\**

Applies To

Neverfail Heartbeat, all versions.


Related Information

None.

KBID-1465

0 out of 0 found this helpful

Comments

0 comments

Please sign in to leave a comment.