The agent does not trust the HP Systems Insight Manager server. Establish a trust relationship.

[Anamarija Sustic]

Hi,
I've uninstalled and reinstalled HPSIM 4.2 and now all my agents (180 of them) don't have the trust relationship with the HPSIM server. What is the best method to do this?
Thanks,
Ana

[Rich Purvis]

If you have HPSIM 4.2 running, there is a new feature in 4.2 called "Configure or Repair Agent Settings" this can help you correct your trust relationship. You may want to look at that option and see if it does what you want.

-Rich

[Anamarija Sustic]

Hi,
I've tried the configure option but it fails with "the agent does not trust the HP systems Insight Manager server. Establish a trust relationship". There must be a way to quickly reconfigure all the agents to trust the new HP SIM. Hope somebody can help me with the right method.
Thanks,
ana

[Rich Purvis]

On the "Configure" drop down there are multiple options within HPSIM 4.2. There is a "Replicate Agents" option which probably does require a trust establishment prior to usage. There is another option called "Configure or Repair Agents". It should not require a prior trust establishment because that is part of what it fixes. It requires that you have an administrator login for the server for it to work. Are you saying that you specifically used the "Configure or Repair Agents" option and it came back and said "no trust established"?
-Rich

[Anamarija Sustic]

Hi,
I've used Configure-Configure and Repair Agents and get the following StdErr EXCEPTION CLASS: com.hp.mx.exceptions.MxFailedAuthenticationException
EXCEPTION: Authentication failed.

I've phoned 1-800 number for Insight Manager and they suggested the best way to do it is to deploy the systems homepage and version control to all 180 agents to fix the trust issue. sounds like a lot of work to reconfigure the trust but that is what they suggest.

Thanks,
Ana

[Haridas]

The exception that you are seeing is because SSH is not configured properly.

Make sure SSH is properly configured on the CMS server.

http://www.hp.com/wwsolutions/misc/hpsim-helpfiles/hpsim-ssh-wp.pdf

The troubleshooting section in this whitepaper has the solution for the authentication problem.

Once SSH is properly configured, the repair agents task should be able to run and fix all the Agent trust relation problems.

[Rich Purvis]

Ana,
Please try the suggestion from Haridass so that you can try and get the "Repair" option to work. That should be much easier than trying to redploy SMH. *If* you do decide to redploy SMH - the mere act of redeploying will not fix this problem. You will need to preconfigure the component with the proper trust - whether that is setting up a trust by name or actually putting in a certificate. Good Luck,

-Rich

[Anamarija Sustic]

Thanks for your replies. I've performed the steps in the Troubleshooting section of the SSH guide but I'm failing at the mxagentconfig -r -n
I just removed HPSIM and OpenSSH (since this was a new install) and will install both using the same local admin account. Hopefully it will work.
Thanks,
Ana

[Trond Haugmo]

Look at the following post, that describes how I got OpenSSH to work in my new HP SIM 4.2 environment (the post at the bottom of the thread):
http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=852539

Good luck!

[Anamarija Sustic]

Hi,
Thanks for your reply. I did the very same steps on the CMS before I was able to run "Configure and repair" agents tools form the CMS to the managed clients to fix the trust issue. It did work at the end but after spending 2 weeks reinstalling the CMS from scratch 4 times and reinstalling compontents on the target management servers.
Ana

[deleted20.02d]

I don't have the "Configure & Repair" Menuitem... Just upgraded to 4.2

[Palani_1]

Today myself also having some issue but i solved the problem.

[David cheng_3]

I hate this trust issue. I have done eveything what HP techs told me to do, I even upgrade all my HP servers to 7.1. Most of them still have trust issue. I begin to feel that most of HP techs have no idea how this trust issue works. No wonder our head quarter is moving to IBM servers, I think soon we will moving to IBM too.

[RuelAlojado]

Hi,

There are three types of Trust Modes between HP Management Homepage and HP SIM.

One is Trusted by Certificates (HP Recommended) and the others are (2.) Trust All (3.) Trust By Name.

If you want to use Trust by Certificates then you can do the following:

If you can access the one of your Local Server HP System Management Homepage (with 6 - 7.1 management agents installed)

From System Management Homepage to go SETTINGS tab select OPTION --> Trusted Certificates.

In the field, INSIGHT MANAGER 7 SERVERNAME, type your HPSIM server name then click GET CERT then Click ADD.

You will noticed that the Server Name was added in the Trust Certificate List.

Also, a file ".PEM" was created after doing the above steps. This can be found in C:\COMPAQ\WBEM\CERTS\.PEM

You can copy this file to your other servers in the same location, then you need to restart the "HP Insight WEB Agent" or "Compaq WEB Agent" SERVICE in order to take effect the settings.

By this, Your HPSIM can established a Single Authentication to that server you configure. Access priviledge to the device depends on the USER settings you granted in the HPSIM User.

For 7.3 Management Agents, you use your Domain Administrator Account with local administrative rights to that server. Then it will prompt you if you want to install the certificate.

Hope this would help you.

Regards,
Ruel

[jim goodman]

David - what exactly is your trust issue?

Is it when you click the hw status icon and you get prompted to login?

An easy way to troubleshoot your problems is set the SMH to trust all and see if that remedies the situation. If it does then you may have a certificate problem or something isn't configured correctly.

You can also do a config / repair agents and blast all options out to one of the untrusted servers and see what that will do for you.

- Jim