Mutual Authentication

[DaveKingston]

I have MOM2005 configured in a domain with about 50 boxes working just fine.

I added monitoring for an ISA box today. To do so I had to uncheck mutual
authentication and allow manual installations. I did so. When I restarted
the service, the rule "MOM Management Server mutual authentication problems"
went nuts -- now I get errors related to this rule for all the boxes that
were installed and working fine. The ISA box works great though :)

I updated the agent settings for all boxes (multi-select and update agent
settings) but the rule is still generating errors.

It's really hard to google for this type of information because all I get is
how to disable mutual authentication. Nothing really tells me about the rule.

Do I have to disable that rule?

Any help is good help....

[Anders Bengtsson]

Hi DaveKingston,

If you have installed agents manually while mutual authentication was enable
and you now have disable it, the fastest way would be to reinstall those
agents. You could do that with a script or SMS or something like that.

Also make sure you have restarted MOM Service on the MOM server, that you
need to do before MOM pick up new global settings.


-----
Regards
Anders Bengtsson
Microsoft MVP - MOM
http://www.contoso.se


D> I have MOM2005 configured in a domain with about 50 boxes working
D> just fine.
D>
D> I added monitoring for an ISA box today. To do so I had to uncheck
D> mutual authentication and allow manual installations. I did so.
D> When I restarted the service, the rule "MOM Management Server mutual
D> authentication problems" went nuts -- now I get errors related to
D> this rule for all the boxes that were installed and working fine.
D> The ISA box works great though :)
D>
D> I updated the agent settings for all boxes (multi-select and update
D> agent settings) but the rule is still generating errors.
D>
D> It's really hard to google for this type of information because all I
D> get is how to disable mutual authentication. Nothing really tells me
D> about the rule.
D>
D> Do I have to disable that rule?
D>
D> Any help is good help....
D>

[gerorge]

Post by DaveKingston
I have MOM2005 configured in a domain with about 50 boxes working just fine.
I added monitoring for an ISA box today. To do so I had to uncheck mutual
authentication and allow manual installations. I did so. When I restarted
the service, the rule "MOM Management Server mutual authentication problems"
went nuts -- now I get errors related to this rule for all the boxes that
were installed and working fine. The ISA box works great though :)
I updated the agent settings for all boxes (multi-select and update agent
settings) but the rule is still generating errors.
It's really hard to google for this type of information because all I get is
how to disable mutual authentication. Nothing really tells me about the rule.
Do I have to disable that rule?
Any help is good help....

You may have to restart the MOM server for the setting to take effect,
or stop and start the MOM service.

[DaveKingston]

You do have to stop and start the service. To get mutual authentication to
change...not in the ISA management pack docs, that little bit of info.

Once you do that, you'll get a bunch of alerts from all of the agents that
are set to require mutual authentication. You'll then have to highlight them
all and update agent settings and the alerts will go away after an initial
barrage.

I've only got 3 or 4 left to work out (that apparently were working but can
not be updated for whatever reason).

Thanks.

Post by gerorge

Post by DaveKingston
I have MOM2005 configured in a domain with about 50 boxes working just fine.
I added monitoring for an ISA box today. To do so I had to uncheck mutual
authentication and allow manual installations. I did so. When I restarted
the service, the rule "MOM Management Server mutual authentication problems"
went nuts -- now I get errors related to this rule for all the boxes that
were installed and working fine. The ISA box works great though :)
I updated the agent settings for all boxes (multi-select and update agent
settings) but the rule is still generating errors.
It's really hard to google for this type of information because all I get is
how to disable mutual authentication. Nothing really tells me about the rule.
Do I have to disable that rule?
Any help is good help....

You may have to restart the MOM server for the setting to take effect,
or stop and start the MOM service.