Insight Manager Server Attempting to Log onto Systems with Agents

[Megan Kielman]

We have an IM server and agents across domains. We have increased audit logging enabled on our "untrused" systems and two of our "untrusted" systems are showing failed log on attemps from the IM server using the service account that many of the IM services run under. Why does the IM server need to authenticate to agent systems? Where is this configured?

[David Claypool]

Can you be a little more specific? What is your definition of untrusted? Is WBEM (WMI) enabled? Have you configured credentials in Global Protocol Settings?

[Megan Kielman]

I apologize for the lack of clarify. All I mean by untrusted is that some of our servers reside in untrusted AD domains.

WBEM is enabled and credentials have been defined. Can you explain what that is for? I noticed that there are two defaults. From looking at the logs it looks as though it tries the first one and if that fails, the second account is attempted.

[Rob Buxton]

If you have wbem enabled globally and credentials entered then HPSIM will attempt to use those credentials to login to the server.

I use wbem but I leave the global credentials blank and use the option for server specific credentials on selected servers. mainly our CommandView Server and a number of Virtual Windows servers that don't have snmp.

On the servers in an "Untrusted" AD you can still use the HP Agents Certificate Trust mechanism, but you will need some firewall ports open if they exist. That gets round the issue of having to pass passwords across.

[Megan Kielman]

Can you further explain the WBEM certificate functionality? if that is selected does it use SSL? My understanding is that WMI is Windows' implementation of WBEM and will communicate via RPC. Does this change if "use certificate instead" is selected?

[Megan Kielman]

Also, can someone explain the port # setting on the WBEM settings page? I am assuming it is a tcp/udp port but it doesn't seem clear what needs to be entered there.