Answered by:
You cannot access VMM management server

Question
-
I installed Rollup 1 (via Windows Update). No errors were logged. Now when I open App Controller (which had been configured for single sign on) I'm prompted for credentials. When entered I'm presented with the following error:
Category: Critical
Description: You cannot access VMM management server <redacted>.
Details: Category: Critical
Message: System.ServiceModel.Security.SecurityNegotiationException
Description: The remote server did not satisfy the mutual authentication requirement.
I reapplied the single sign on settings (they were still present) but no change. Any ideas?William Busby, PMP
Wednesday, June 13, 2012 8:13 PM
Answers
-
Hi William,
If the SPN for the VMM server is not be registered correctly it will cause mutual authentication to fail.
An easy way to check if this is the issue is to run the Virtual Machine Manager Configuration Analyzer (VMMCA).
This will identify if there is a configuration issue with VMM that may be causing the issue.
Thanks
Richard
This posting is provided "AS IS" with no warranties, and confers no rights.
- Proposed as answer by Richard RundleMicrosoft employee Thursday, August 9, 2012 4:41 PM
- Marked as answer by Richard RundleMicrosoft employee Wednesday, August 15, 2012 6:46 PM
Saturday, July 14, 2012 12:25 AM
All replies
-
Hi William,
When configured for single sign-on you shouldn't be prompted for credentials.
If App Controller is not configured for single sign-on are you able to connect to the VMM management server?
Thanks
Richard
This posting is provided "AS IS" with no warranties, and confers no rights.
Saturday, June 16, 2012 12:16 AM -
No. I removed the single sign-on configuration, rebooted the server and logged in with credentials for an administrator. Same error. Basically App Controller is dead.
William Busby, PMP
Monday, June 18, 2012 2:50 PM -
Hi William,
To help narrow down the issue:
- Is your VMM management server clustered?
- Is App Controller running as a service account or a domain account?
- Are the App Controller server and the VMM server in the same domain?
If there are different domains:- Is there a 2 way trust between the domains (forest/domain)?
- Is the user account connecting to App Controller in the same domain as the App Controller server?
Thanks
Richard
This posting is provided "AS IS" with no warranties, and confers no rights.
Monday, June 18, 2012 4:45 PM -
VMM management server is not clustered
App Controller is running under a domain account
VMM and App Controller are in the same domain (right now on the same server)
William Busby, PMP
Monday, June 18, 2012 5:43 PM -
Hi William,
If the SPN for the VMM server is not be registered correctly it will cause mutual authentication to fail.
An easy way to check if this is the issue is to run the Virtual Machine Manager Configuration Analyzer (VMMCA).
This will identify if there is a configuration issue with VMM that may be causing the issue.
Thanks
Richard
This posting is provided "AS IS" with no warranties, and confers no rights.
- Proposed as answer by Richard RundleMicrosoft employee Thursday, August 9, 2012 4:41 PM
- Marked as answer by Richard RundleMicrosoft employee Wednesday, August 15, 2012 6:46 PM
Saturday, July 14, 2012 12:25 AM -
Thanks for the response. I wound up reinstalling VMM to clear this, installed the rollup and didn't see the problem again. Can't say what the issue was but at least it's behind me.
William Busby, PMP
Wednesday, August 22, 2012 12:06 PM