Hi All,
Spent alot of time looking at this issue and getting no where, so looking for some guidance please.
Setup (brief): Scom management server > Scom gateway (client) > scom agents (client)
Current: Multiple servers are talking successfully to SCOM gateway (no certificates used) but one of these stopped working.
Issue: Reinstalled Agent but it gets stuck pending in SCOM management server. No errors reported on MS or GW. Only error listed on end server which include event id 20057, 21001 and 21016.
error breakdown: The error returned is 0x80090303(The specified target is unknown or unreachable). mutual authentication failed. Verify the SPN is properly registered on the server and that, if the server is in a separate domain, there is a full-trust relationship between the two domains. Communication will resume when "GW" is available and communication from this computer is allowed.
Investigation: Most everything I have come across say this is an issue around the SPN's. However the SPN referenced is for the GW server and only GW server has registered SPN's in AD. Other servers are successfully talking into the GW and through it to MS, so this clearly is not issue. Communication to the GW from this affected server is successful, as is DNS. Port connection to GW is open from this server. Nothing being blocked via firewalls/network.
This has installed SCOM agent 8.0.13053.0 (other servers still working are on older ones v7). I have tried completely uninstall, remove folder (registry keys do not exist post uninstall). Then pushed it out again via Discovery wizard. Still stuck pending install and same event ids on local server.
Any thoughts?