SIM 5 + PSP 7.4 = No Trusts

[Kevin Kelling]

I'm rather bamboozled by this. Basically suddenly after installing PSP 7.4 on the SIM server I can't establish a trust with a single server to save my life.

90% of our servers had a working trust by certificate configuration. The certificates are still correct and nothing has changed.

But now the VC Repository does not work because SIM does not trust the server it is running on along with 400+ other servers.

I tried all of the following:

* Repair Agents tool on multiple servers followed by an identification task
* Setting agents to "Trust All" and then running an identify task.
* Reinstalling PSP 7.4 on the management server
* verified that the certificates still match and are correct.

I feel like I am in the twilight zone where no rules of logic work.

At the very least a "trust all" setting followed by an identification task should result in a trust.

Have done many reboots as a part of this.

Any ideas would be greatly appreciated as I now have several hundred untrusted servers (including the SIM server itself -- W2003 SP1).

Thanks!

[Rob Buxton · Accepted solution]

Kevin,
See:
http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=956506

Seems to be a problem they're aware of.
The trust details from the agent configuration are not being installed.

[Rich Purvis]

Ok, well they may not be the same problem. The problem of SMH preconfiguration settings sometimes not sticking is an SMH install-time issue. If you ran "Repair Agents" I would have anticipated it to have gotten the trust working again if it was the SMH settings not being propagated at install time. There are some other threads discussing a possible SIM5 trust issue - was your HPSIM 5.0 install an upgrade or a fresh install of HPSIM?

-Rich

[Kevin Kelling]

This is a relatively new server. SIM 4.2 SP2 was the original build. It was then upgraded to SIM 5 the week it was released.

[Rich Purvis]

Kevin,
This is one of the threads I was referring to:
http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=952908

I don't know if it is the same issue you are seeing or not - you may check it out and see if it looks similar.

-Rich

[pedro-chicago]

I had a similar problem (CMS did not trust itself or anything else - create a query where "trust status is false" to check) after upgrading from 4.2 to 5.0 and encountering many of the same issues as others (no reports, no data collection, etc.). I uninstalled VCRM and reinstalled it, then ran the daily device identification task. This worked for me.

As an aside, this SIM install has been upgraded with each new version since the original 4.0 release. With all of the issues we've had, and all the issues other have reported in the forums, we are replacing this install with a fresh 5.0 install. I have been able to migrate a lot of the configurations using various "mx*" commands, so there won't be too much to recreate.

[Kevin Kelling]

thanks for the info. It sounds like the problems are isolated to those who have upgraded from a previous version.

What customization we have done can be rebuilt in a couple hours. I think I'll try that route.

Thanks!

[Craig Jackson_3]

So with PSP 7.40A, there's nothing I can do which will completely satisfy the trust relationship?

I've been trying to figure out what I need to do to make those little "i" characters go away in the software column. Sounds like there isn't anything to do except to wait for the fix.