Deploying the System Center Operations Manager 2007 Linux Agent fails with "The certificate Common Name (CN) does not match"

  • Article

hotfixHere’s another KB article we published today. This one describes a problem where deploying the SCOM 2007 Linux Agent fails with "The certificate Common Name (CN) does not match" due to a certificate issue:

=====

Symptoms

Attempting to deploy the System Center Operations Manager 2007 Linux Agent to a Red Hat server fails. In this scenario you receive the error below while discovering and deploying the agent:

The certificate Common Name (CN) does not match. Please resolve the issue, and then run

The server certificate on the destination computer (<Redhat machine name>) has the following errors:
The SSL certificate is signed by an unknown certificate authority.
The SSL certificate contains a common name (CN) that does not match the hostname.
For additional help on this error please go to ....

Cause

This can occur for either of the following reasons:

- Certificates may not be valid as the reporting server may have been changed

- The certificate contains an incorrect host name

Resolution

To resolve this issue, complete the steps below:

1. Remove the existing contents of the agent directory on the server and reinstall the agent RPM
2. Generate the certificate, making sure to use the correct host name: "/opt/Microsoft/scx/bin/tools/scssslconfig –f –h <hostname>"
3. Check the status of the certificate: "openssl x509 -noout -in /etc/opt/microsoft/scx/ssl/scx.pem -subject -issuer -dates"
4. Discover the agent from the console and sign the invalid certificate without SSH

=====

For the most current version of this article please see the following:

2651766: Deploying the System Center Operations Manager 2007 Linux Agent fails with "The certificate Common Name (CN) does not match"

J.C. Hornbeck | System Center Knowledge Engineer

App-V Team blog: https://blogs.technet.com/appv/
AVIcode Team blog: https://blogs.technet.com/b/avicode
ConfigMgr Support Team blog: https://blogs.technet.com/configurationmgr/
DPM Team blog: https://blogs.technet.com/dpm/
MED-V Team blog: https://blogs.technet.com/medv/
OOB Support Team blog: https://blogs.technet.com/oob/
Opalis Team blog: https://blogs.technet.com/opalis
Orchestrator Support Team blog: https://blogs.technet.com/b/orchestrator/
OpsMgr Support Team blog: https://blogs.technet.com/operationsmgr/
SCMDM Support Team blog: https://blogs.technet.com/mdm/
SCVMM Team blog: https://blogs.technet.com/scvmm
Server App-V Team blog: https://blogs.technet.com/b/serverappv
Service Manager Team blog: https://blogs.technet.com/b/servicemanager
System Center Essentials Team blog: https://blogs.technet.com/b/systemcenteressentials
WSUS Support Team blog: https://blogs.technet.com/sus/

clip_image001 clip_image002

Comments

  • Anonymous
    November 12, 2015
    Great post from your hands again. I loved the complete article.
    By the way nice writing style you have. I never felt like boring while reading this article.
    I will come back & read all your posts soon. Regards, Lucy.
  • Anonymous
    December 03, 2015
    The comment has been removed