OpsMgr was unable to set up a communications channel

[aurimas]

I installed certificates to SCOM2007 and to my workgroup clients from domain
CA. I installed root certificates on both machines as well. I used to import
certificates with MOMCertImport.exe and now I can see registry key
"ChannelCertificateSerialNumber" on both machines (server and client). But
workgroup clients keep geting:

OpsMgr was unable to set up a communications channel to scom.comp.local and
there are no failover hosts. Communication will resume when scom.comp.local
is both available and allows communication from this computer.

The OpsMgr Connector connected to scom.comp.local, but the connection was
closed immediately after authentication occured. The most likely cause of
this error is that the agent is not authorized to communicate with the
server, or the server has not received configuration. Check the event log on
the server for the presence of 20000 events, indicating that agents which are
not approved are attempting to connect.

Clients wont apear on pending management section, what else i can do to get
client work with scom 2007 ?

p.s. firewalls are disabled and ports 5723 and 5724 are open,

thanks
aurimas

[Anders Bengtsson [MVP]]

Hello aurimas,

Have you configure Administration/settings/security to allow pending agents?

Anders Bengtsson
Microsoft MVP - System Center Operations Manager
www.contoso.se

[Pete Zerger]

Hello aurimas,

The error messages in the Operations Manager Event Log will generally tell
the story. The 21016 and 20070 errors I suspect you are referring to are
generally not the most descriptive logged for a mutual authentication issue.
However, in most cases we will find a descriptive error in the log.

So, filter your view on that log on the agent to exclude informational events,
and let us know any error messages in the 20,000 or 21,000 range other than
the two event IDs mentioned above.

Regards,

Pete Zerger, MVP - Operations Manager and Essentials 2007
Founder, SystemCenterForum.org
URL:http://www.systemcenterforum.org
MP Catalog: http://www.systemcenterforum.org/mps
OpsMgr Tools:http://www.systemcenterforum.org/tools

[victory_tb]

Hi Aurimas, did u solve the problem? if not yet, try to resolve your FQDN to
ip in hosts file for workgroup clients. This solved my similar problem.

victory_tb