topic Re: Agent Trust error in Server Management - Systems Insight Manager

Agent Trust error

Unique Glover — Tue, 27 Dec 2005 11:36:23 GMT

When trying to use HP SIM 5.0 'Replicate Agent Settings' I receive the follwing message from the stdOutput screen. Process Failed 'Agent Trust error' or check Trust Relationship, although SNMP read, read/write settings have been configured on member servers. Has anyone ran across this message before or knows how to rectify this problem?

Re: Agent Trust error

rcseattle — Wed, 28 Dec 2005 11:27:19 GMT

You have to configure the remote server to trust the management server.

Log into the SMH of the remote server and set the trust on the "Settings" tab.

However if your trusts are broken and you have 5.0 and not 5.0.2 you may have the same issue I have to take up with HP right now.
http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=986744

Re: Agent Trust error

Unique Glover — Wed, 28 Dec 2005 13:44:19 GMT

I had a feeling that the trust would have to be set up on the remote server but I think it would counter productive to run that same process for over 200 servers I have in my environment. I know of two ways

1. SIM --> Deploy --> Drivers, etc --> Install Proliant Support Pack

2. RDU to target remote server

Installing the support pack does not allow me to omit drivers that aren't needed it is usually all or nothing

The RDU would be a better option but I would need some type of script to deploy the VCA to all 200 boxes in one shot.

Any suggestions?

Re: Agent Trust error

Rich Purvis — Thu, 29 Dec 2005 20:40:24 GMT

HPSIM 5.0 has a feature called something like "Configure or Repair Agent Settings". This option will fix your trust for a group of servers. I would suggest you look at trying it on a server and see if it does what you want. If so you can do the rest in a group or groups if you like.

-Rich

Re: Agent Trust error

Rich Purvis — Thu, 29 Dec 2005 20:42:15 GMT

Oh, I forgot to mention that it will fix your trust relationship but it does it by using certificates, which it will deploy for you but I don't think it lets you do something like trust by name - only trust by cert.

-Rich

Re: Agent Trust error

William Robertson_3 — Fri, 30 Dec 2005 06:31:50 GMT

Hi there

Regarding the enabling of this trust by certificates... Is there any pre-requisite on the client that is required for this "trust by certificate" to work? I.e. Must the client be on the same Proliant Support Pack version as the HPSIM itself?

Any advice you may have on this would be appareciated, as I have teh same proble, but no amount of "Repair or Configure Agents..." has helped me...

Thanks
William R.

Re: Agent Trust error

Rich Purvis — Wed, 04 Jan 2006 12:19:55 GMT

They do not have to be the exact same PSP version for the trust to work. In regards to the "Configure or Repair Agent Settings" option not working, I think the first release that this option was available had some dependencies on SSH being setup properly on the target - but that release had some issues with SSH getting configured correctly. A large number of those issues were addressed in a follow up HPSIM release - off the top of my head I am drawing a blank on what those release numbers were - if I run across them I will try and post them here for completeness.

-Rich

Re: Agent Trust error

RuelAlojado — Thu, 05 Jan 2006 07:30:10 GMT

I have this workAround for Trust Relationship using Certificate.

For Management Agents below 7.2

1. Copy the <>.PEM (Certificate File of your SIM Server (Working Certificate)) file to C:\compaq\wbem\certs Directory of the affected Manage Server.

2. Restart HP/Compaq WEB Agents Service of that Server.

For Management Agent 7.3 or Higher:

1. Copy the <>.PEM (Certificate File of your SIM Server (Working Certificate)) file to C:\HP\HPSMH\certs\ Directory of the affected Manage Server

2. Restart HP System Management Homepage Service of that Server.

Hope this would help.