Your welcome:)
Venlig hilsen Henrik Andersen Tools Direkte +4563636158 Mobile +4521579037 [email protected] [cid:[email protected]] JN Data A/S · Havsteensvej 4 · 4000 Roskilde Telefon 63 63 63 63/ Fax 63 63 63 64 www.jndata.dk [cid:[email protected]] Fra: [email protected] [mailto:[email protected]] På vegne af Pete Hakesley Sendt: 26. januar 2016 10:53 Til: [email protected] Emne: [msmom] RE: Help with a gateway Henrik, Your last post got me thinking and I have replaced the OpsMgr certificate on the MS with a new one and would you credit it it's all working now. The cert did not expire so I can assume there was a problem with the original certificate. Thanks for your help. Peter Hakesley | Monitoring & Automation Technical Lead Engineer, Data Centre Services t: +44(0)845 155 6556 ext: 4006 e: [email protected]<mailto:[email protected]> | w: www.scc.com<http://www.scc.com/> a: SCC, CV1, Cole Valley, 20 Westwood Avenue, Tyseley, Birmingham B11 3RZ From: [email protected]<mailto:[email protected]> [mailto:[email protected]] On Behalf Of Henrik Andersen Sent: 26/January/2016 09:25 To: [email protected]<mailto:[email protected]> Subject: [msmom] SV: Help with a gateway No,. I mean you have to have a vert for the MS too and the GW should the have the CA cert for trusting that. Beware also for intermediate certifcates. You have, of cause, used momcertimport on the GW. You'll have to do that on the MS as well. Venlig hilsen Henrik Andersen Tools Direkte +4563636158 Mobile +4521579037 [email protected]<mailto:[email protected]> [cid:[email protected]] JN Data A/S · Havsteensvej 4 · 4000 Roskilde Telefon 63 63 63 63/ Fax 63 63 63 64 www.jndata.dk<http://www.jndata.dk> [cid:[email protected]] Fra: [email protected]<mailto:[email protected]> [mailto:[email protected]] På vegne af Pete Hakesley Sendt: 26. januar 2016 10:09 Til: [email protected]<mailto:[email protected]> Emne: [msmom] RE: Help with a gateway Henrik, I have the CA cert in the trusted root at each end the GW cert is only on the GW. Do you mean I need to put the GW cert in the Computer personal store on the MS? Peter Hakesley | Monitoring & Automation Technical Lead Engineer, Data Centre Services t: +44(0)845 155 6556 ext: 4006 e: [email protected]<mailto:[email protected]> | w: www.scc.com<http://www.scc.com/> a: SCC, CV1, Cole Valley, 20 Westwood Avenue, Tyseley, Birmingham B11 3RZ From: [email protected]<mailto:[email protected]> [mailto:[email protected]] On Behalf Of Henrik Andersen Sent: 26/January/2016 09:02 To: [email protected]<mailto:[email protected]> Subject: [msmom] SV: Help with a gateway Hi! Beware that you'll have to have certs in both ends (mutual authentication) /Henrik Fra: [email protected]<mailto:[email protected]> [mailto:[email protected]] På vegne af Pete Hakesley Sendt: 26. januar 2016 09:47 Til: MSMOM ([email protected]<mailto:[email protected]>) Emne: [msmom] Help with a gateway Hi all hope someone can help me. We have SCOM 2007 R2 CU7 Environment I have a management server in domain A I have a Windows 2012 Server as a Gateway in Domain B These machines are connected by a dedicated management VLAN I have put host entries [management VLAN] in the GW and MS for each other installed the GW software on the GW with local AD credentials for the Action account. I have put the CA cert on the gateway in Trusted Store. I have generated a cert using Standalone CA and using the Microsoft guide. So I think I everything in place but tey will not talk and I keep getting errors on the GW and absolutely nothing on the Mgt Svr. I have checked comms using telnet <host> 5723 in both directions - all good. I would expected to see event ID 20000 on the MS if there was a problem with the cert. GW errors 21016,7021,7016,20070,21001 and 21023 the later all the time. MS Errors Nothing!! Anyone have any ideas? Peter Hakesley | Monitoring & Automation Technical Lead Engineer, Data Centre Services t: +44(0)845 155 6556 ext: 4006 e: [email protected]<mailto:[email protected]> | w: www.scc.com<http://www.scc.com/> a: SCC, CV1, Cole Valley, 20 Westwood Avenue, Tyseley, Birmingham B11 3RZ
