topic Re: Version Control Agent Trust Relationship Problem in Server Management - Systems Insight Manager

Version Control Agent Trust Relationship Problem

Ragnar Miguel Herreros — Fri, 15 Jul 2005 04:34:46 GMT

I´m having this problem with my SIM connection through all of my agents on my network. I´ve been reading several forum posts here but without any luck, finding the solution.
I´ve installed all the latest software for my installation. When I view All Systems (in SIM) I get the mark ? (upside-down) on the SW field for all my servers (except the SIM server) saying : Software version Status: Security Trust Issue, click for details. When I click a get a new window saying :
Be sure that a trust relationship exists between the HP Systems Insight Manager and Version Control Agent on the target system.

Consult the help for more information about setting up a trust relationship.

I think that my certificate setup in correct and also I´ve tried Software Status Polling often. SNMP settings are like this :
On the Server :
Traps, community name : public
Security, public READ ONLY
private READ CREATE
Accept SNMP packets from these hosts
localhost

On every agent :
Traps, community name : public
Trap destinations : IP_OF_THE_SIM_SERVER
Security, public READ ONLY
private READ CREATE
Accept SNMP packets from these hosts
localhost, IP_OF_THE_SIM_SERVER

Best regards,
Ragnar

Re: Version Control Agent Trust Relationship Problem

jim goodman — Fri, 15 Jul 2005 07:23:35 GMT

Hi Ragnar,

Do you have your SMH trust configured to trust the CMS?

- Jim

Re: Version Control Agent Trust Relationship Problem

Ragnar Miguel Herreros — Fri, 15 Jul 2005 08:30:28 GMT

Hi Jim,

Yes I made a new certificate on the SIM server and imported them on the agents.
Everything should be trusted but apparently it isnÂ´t working.

Re: Version Control Agent Trust Relationship Problem

jim goodman — Fri, 15 Jul 2005 08:48:06 GMT

Are you still prompted to log in to the SMH when you click the status icon in the HW column?

If you can get in without logging in to the SMH, re-run software status polling. If have to login then the problem is narrowed to the SMH. Double check your entire config from beginning to end. Look at SNMP, Trust by Cert, make sure the only certificate in the list is the CMS, unless you have more than certificate for different CMS. If only the CMS is listed, remove the cert and re-add the CMS cert from within the http settings page and see if that makes a difference.

If none of this works, you may need to log a call as something else is going on.

- Jim

Re: Version Control Agent Trust Relationship Problem

Ragnar Miguel Herreros — Mon, 18 Jul 2005 04:24:39 GMT

Hi Jim,

Yes IÂ´m still prompted when I click on the status icon for the HW column.

IÂ´ve tried to go over the config, even re-add the certificate etc...
But with no good.

How do I log a call, network monitor or ?

Ragnar

Re: Version Control Agent Trust Relationship Problem

jim goodman — Mon, 18 Jul 2005 06:44:11 GMT

The support number I believe is 800.474.6836

It is hard to say what is happening. I think having someone on the phone going over this with you can help pinpoint the problem.

Let us know what you find out.

- Jim

Re: Version Control Agent Trust Relationship Problem

NJK-Work — Mon, 18 Jul 2005 08:35:57 GMT

Hi Ragnar,

I have similar problems from time to time. What I found works is to do a new "Data Collection" on the problem devices and then give it some time to update the tables.

So select your problem servers with checkboxes and the from the menu in SIM click the "Options" item and then select "Data Collection..." from the sub-menu. Then just follow the wizard (I usually overwrite the existing data when prompted).

Try that and let me know if that works.
Nelson

Re: Version Control Agent Trust Relationship Problem

Ragnar Miguel Herreros — Tue, 19 Jul 2005 01:13:24 GMT

Hi Nelson,

I ran new "Data Collection" on one of the servers I have (did overwrite), but that didnÂ´t help much.

What is my next step ?

Ragnar

Re: Version Control Agent Trust Relationship Problem

Sakti Chakravarty — Thu, 21 Jul 2005 21:27:07 GMT

If you are prompted to log in, then the certificate or Trust is not set up correctly.

I use the Remote Deployment Utility that comes with the Support Pack to deploy correctly configured agents. You can deploy just these components to a system (I found this was sufficient to get systems talking to the CMS, but no reboot was required):

(1) HP System Management Homepage
(2) Version Control Agent
(3) HP Insight Management Agents

You need to ensure these components are properly configured before deploying them to your systems. (1) contains information about the Trust method and CMS certificate (if required), so if you get this part right, your Trust issue should disappear.