In part 1 there is a description how to modify SCOM and RHEL to get ready for the agent installation. If this wasn't properly done you will get into trouble. Believe me! In this part 2 I will describe the agent installation and how to check if the setup was well done.
[root@<hostname> ~]# tail -f /var/log/secure Mar 27 15:09:55 <hostname> sshd[56686]: Accepted password for opsmgrsvc from <SCOM-IP> port 57389 ssh2 Mar 27 15:09:55 <hostname> sshd[56686]: pam_unix(sshd:session): session opened for user opsmgrsvc by (uid=0) Mar 27 15:09:55 <hostname> sshd[56686]: pam_unix(sshd:session): session closed for user opsmgrsvc Mar 27 15:09:56 <hostname> sshd[56704]: Accepted password for opsmgrsvc from <SCOM-IP> port 57390 ssh2 Mar 27 15:09:56 <hostname> sshd[56704]: pam_unix(sshd:session): session opened for user opsmgrsvc by (uid=0) Mar 27 15:09:56 <hostname> sshd[56706]: subsystem request for sftp Mar 27 15:09:56 <hostname> sshd[56704]: pam_unix(sshd:session): session closed for user opsmgrsvcAs we can see there are successful connections via ssh, protocol version 2 and a successful data transfer using sftp. Now we can state that our credentials are OK and valid!
[root@<hostname> ~]# cd /etc/opt/microsoft/scx/ssl
[root@<hostname> ~]# cd /etc/opt/microsoft/scx/ssl [root@<hostname> ~]# mv scx-host-<hostname>.pem scx-host-<hostname>.pem.orig
cd "%ProgramFiles%\System Center 2012\Operations Manager\Server" scxcertconfig.exe -sign c:\Source\scx-host-<hostname>.pem c:\Source\scx-host-<hostname>-new.pem
[root@<hostname> ~]# cd /etc/opt/microsoft/scx/ssl [root@<hostname> ~]# mv scx-host-<hostname>-new.pem scx-host-<hostname>.pem [root@<hostname> ~]# chmod 444 scx-host-<hostname>.pem [root@<hostname> ~]# ls -l total 12 -r--r--r-- 1 root root 1224 Mar 27 14:04 scx-host-<hostname>.pem -r--r--r-- 1 root root 1188 Mar 27 13:05 scx-host-<hostname>.pem.orig -r-------- 1 root root 1704 Mar 27 13:05 scx-key.pem lrwxrwxrwx 1 root root 48 Mar 27 13:05 scx.pem -> /etc/opt/microsoft/scx/ssl/scx-host-<hostname>.pem [root@<hostname> ~]#It's now the time to do little file operations: rename the new certificate and assign the correct file permissions.
You can download this page as pdf file [922 kB].
On the next page I will provide some additional information about the SCOM agent.
On the previous page I described the base setup of the SCOM and RHEL.
Frank Ickstadt Am Dattenbach 9-11 65817 Eppstein Germany |
Phone: not available | |||
frank [dot] ickstadt [at] removethis gmail [dot] com | Fax: currently out of order |