locked
PKI MP RRS feed

 > 

  • Question

  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi

    We are using the PKI MP to monitor certificates. I see the certificate data in the Event Log on the host when debugging the discovery script. But the data does not end up getting stored in the OpsMgr DB and therefore it will not be monitored. I looked for overrides and/or anything else that could prevent the discovery data from getting "dumped" or ignored but could not find anything. Is there a way to debug the send process where the data is sent to the Management Server for insertion to the DB and it is being rejected along the way?

    Thursday, July 16, 2020 6:32 AM

Answers

All replies

  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi,

    Which version of the PKI management pack are you using? The latest version can be found from here:
    https://github.com/rafabu/SCOM-PKICertificateMP

    As far as I know there's no way of debugging the data insertion to the Operations Manager database, from what I know it's only possible to debug the workflows running on the agents which you've already seem to have done.

    Debugging SCOM Workflows using PowerShell
    https://www.opslogix.com/knowledgebase/debugging-scom-workflows-using-powershell

    If you know where to search and what to look for, then you can of course find the data in the Operations Manager database, but this would require some deeper SQL knowledge.

    The PKI Certificate Verification management pack discovers PKI Certificates and Certificate Revocation Lists inside Windows computers’ local certificate stores.

    Best regards,
    Leon

    Blog: https://thesystemcenterblog.com LinkedIn:

    Thursday, July 16, 2020 8:05 AM
  • Question
    Sign in to vote
    0
    Sign in to vote

    We are using the previous version of the PKI MP. The newer one I seem to feel and read from the issues list has problems? You tried it?

    The catch here is that the current version that I'm using is working great for all my servers and generally can discover all my server certificates. Just one specific host is having issues.

    Thursday, July 16, 2020 2:32 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    I've used the new PKI management pack without any issues.

    Blog: https://thesystemcenterblog.com LinkedIn:

    • Marked as answer by Reuvy Monday, July 20, 2020 11:55 AM
    Thursday, July 16, 2020 2:39 PM