Provisioned Target Devices boot slow or initially boot ok in small batches but after a certain number of Devices are running Target performance continues to nose dive.
Target devices get stuck at a black screen or "found vDisk" early in the PXE boot process.
Target Devices show an uptick in the number of retries and typically steadily increase.
A Target reboot does not resolve the behavior.
Allow the Sentinel One client to complete its Certificate Disk Scan in a read-write version of the vDisk. The concept behind a disk certificate scan is to prepare certificate results for the agent in order to avoid calculating them during times where CPU and disk usage is high, for example during boot.
How can you tell if the Sentinel One Certificate Security Scan has been completed?
From an elevated command line run:
Sentinelctl.exe read_fdcs_status
This will return one of the following values, anything other than 2 indicates scan in progress.
CreatingTaskRecords = 0
TaskRecordsCreated = 1
ScanCompleted = 2
As Targets continue to boot the start of the cert disk scan causes a multiplying effect of Read IO requests to the PVS Server in question. The increase in IO request can effectively slow down overall PVS Server performance resulting in what appears to look like a storage based IO delay. In reality the delay is originally sourced from the Target Device need to fulfill the cert disk scan operation.
Although this behavior is specific to Sentinel One based clients when a vDisk scan or mass definitions update is kicked off by other security and/or AV based clients, for example, Windows Defender, the same behavior can be expected.