Hi,
We currenlty have our SCOM Gateway server greayed out in SCOM console. When checking the event logs in the G/W we found that the certificate is loading successfully.
Log Name: Operations Manager
Source: OpsMgr Connector
Date: 11/27/2014 1:50:52 AM
Event ID: 20053
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: Server.xx.domain
Description:
The OpsMgr Connector has loaded the specified authentication certificate successfully.
But fails to authenticate with the below errors.
og Name: Operations Manager
Source: OpsMgr Connector
Date: 11/27/2014 1:50:53 AM
Event ID: 20057
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Server.xx.domain
Description:
Failed to initialize security context for target MSOMHSvc/RMSServer.domain The error returned is 0x80090303(The specified target is unknown or unreachable). This error can apply to either the Kerberos or the SChannel package.
Log Name: Operations Manager
Source: OpsMgr Connector
Date: 11/27/2014 1:50:53 AM
Event ID: 21001
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Server.xx.domain
Description:
The OpsMgr Connector could not connect to MSOMHSvc/RMSServer.domain because mutual authentication failed. Verify the SPN is properly registered on the server and that, if the server is in a separate domain, there is a full-trust relationship between the
two domains.
Log Name: Operations Manager
Source: OpsMgr Connector
Date: 11/27/2014 1:50:53 AM
Event ID: 20070
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Server.xx.domain
Description:
The OpsMgr Connector connected to Server.domain, but the connection was closed immediately after authentication occurred. The most likely cause of this error is that the agent is not authorized to communicate with the server, or the server has not received
configuration. Check the event log on the server for the presence of 20000 events, indicating that agents which are not approved are attempting to connect.
Log Name: Operations Manager
Source: OpsMgr Connector
Date: 11/27/2014 1:50:55 AM
Event ID: 21016
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Server.xx.domain
Description:
OpsMgr was unable to set up a communications channel to RMSServer.domain and there are no failover hosts. Communication will resume when RMSServer.domain is available and communication from this computer is allowed.
Steps taken till now.
1. Checked the connectivity from Gw to MS and vice versa, it was successful.
2.The certificates were re-imported from both G/W and RMS.
3. We could not find any duplicate SPN registered in RMS or G/W.
Please advise how we could proceed further.
Regards,
JS
Jesty Sam