This article describe steps to troubleshoot a handshake failure between Inventory Agent (All platforms) and Inventory Server. 

• If connection is established between the Inventory Agent and the Inventory Server within the log files it reports a "handshake succeeded";

• If the Inventory Agent is unable to establish connection with Inventory Server then it reports a handshake error of "handshake failed":

To identify the root cause, please follow these steps.

Step 1 run with test parameter

• Stop the Service (Windows).
• Run the snowagent with the test parameter:
  • Example on Windows: snowagent.exe test
  • Example on OSX and Linux: snowagent test
  • Example on Unix: java -jar snowagent.jar test
•  The log file will show the error and warning messages.

If the following message is seen on a Windows machine that is running Inventory Agent it could be that the certificate has:

• Not been added correctly to the Windows server which has Inventory installed (to which Inventory Agent is attempting to deliver data).
• A mismatch between an eventual thumbprint in the Inventory Agent configuration file, and the thumbprint for the certificate which they want to use, as detailed in the certificate on the Windows server which has Inventory installed.

2017-10-10T12:50:47+02:00; WARNING; snowagent; client\configmessagehandler.cpp; Client::ConfigMessageHandler::SendToEndpoint; A http send error occured with endpoint https://X:443. HTTP send error.: The connection with the server was terminated abnormally
2017-10-10T12:50:47+02:00; ERROR; snowagent; client\messageloop.cpp; Client::MessageLoop::Handshake; Handshake failed. Cannot connect to server. No endpoint can establish a connection to the server.

Step 2 Verify Inventory Server 

• Browse to the endpoint address in Web Browser from the same machine where Inventory server is installed.
• If the Server is up, a page will be displayed similar to the below otherwise the Inventory Server is not running.
• Take a note of the IP address and port as per server configuration.

Step 3 - Verify Agent Configuration

• Open the snowagent.config file from Inventory Agent installation directory
• Verify that the Server End Point address is the correct IP address and port for the Inventory Server. 
• If it is not then modify it with correct values and test the connection again.

Step 4 - Verify Network

• If Inventory Server is running and the Agent configuration is correct then another point to look into is Network.
• Ping the Server End Point address from the Agent device and check if it is reachable via ICMP.
• Browse to the endpoint address in the Web Browser from device where Agent is installed.
  • If you can access it via HTTP/HTTPS then it means that Inventory Server is up and running and accessible from Agent location.
  • If not then check with network administrator that firewall or other network policy allows traffic HTTP/HTTPS + PORT traffic.