http://www.systemcentercentral.com/PackCatalog/PackCatalogDetails/tabid/145/indexId/24860/CommentRSS/1/Default.aspx en-us Copyright 2009 System Center Central All Rights Reserved. Thu, 24 May 2012 02:57:47 GMT

Thanks,
Siva]]> Mon, 21 May 2012 10:16:07 GMT http://www.systemcentercentral.com/PackCatalog/PackCatalogDetails/tabid/145/indexId/24860/currentpage/1/Default.aspx#comment-1708 Thu, 17 May 2012 14:42:56 GMT http://www.systemcentercentral.com/PackCatalog/PackCatalogDetails/tabid/145/indexId/24860/currentpage/1/Default.aspx#comment-1705 Mon, 14 May 2012 09:01:19 GMT http://www.systemcentercentral.com/PackCatalog/PackCatalogDetails/tabid/145/indexId/24860/currentpage/1/Default.aspx#comment-1704 Fri, 27 Apr 2012 17:16:37 GMT http://www.systemcentercentral.com/PackCatalog/PackCatalogDetails/tabid/145/indexId/24860/currentpage/1/Default.aspx#comment-1687 can i monitor only the root ca server certificates and not the personal certificates?

Thanks]]> Thu, 19 Apr 2012 08:49:47 GMT http://www.systemcentercentral.com/PackCatalog/PackCatalogDetails/tabid/145/indexId/24860/currentpage/1/Default.aspx#comment-1678 Mon, 09 Apr 2012 15:09:19 GMT http://www.systemcentercentral.com/PackCatalog/PackCatalogDetails/tabid/145/indexId/24860/currentpage/1/Default.aspx#comment-1660 Wed, 21 Mar 2012 20:16:47 GMT http://www.systemcentercentral.com/PackCatalog/PackCatalogDetails/tabid/145/indexId/24860/currentpage/1/Default.aspx#comment-1642 I just checked and the download seems to work for me. You need to be logged on to the site and then you should be able to click the "Download" button. The file name is "PKI_Certificate_MP_V1.0.1.20.zip".
Raphael]]> Wed, 21 Mar 2012 19:59:05 GMT http://www.systemcentercentral.com/PackCatalog/PackCatalogDetails/tabid/145/indexId/24860/currentpage/1/Default.aspx#comment-1641 Wed, 21 Mar 2012 18:18:13 GMT http://www.systemcentercentral.com/PackCatalog/PackCatalogDetails/tabid/145/indexId/24860/currentpage/1/Default.aspx#comment-1640 We have an environment with several 2003 and 2008 servers. Running OpsMgr 2007 R2. We have implemented the Management Pack and followed the guide, but we have run into an issue that we cannot seem to solve. The Certificate discovery is not run (Configuration - certificate store roll up is not monitored) on some servers, but not all and it is not a clear pattern to which servers the certificates are discovered on and not (both 2003 and 2008). We have the same issue in our QA environment as well but not on the same servers as in our Production environment. Do you have any idea why this happens, troubleshooing ideas, known issues? Thanks a lot!]]> Thu, 23 Feb 2012 11:30:04 GMT http://www.systemcentercentral.com/PackCatalog/PackCatalogDetails/tabid/145/indexId/24860/currentpage/1/Default.aspx#comment-1604 I am trying to find a way to disable certificate disovery for specific Certificates.
Basically We have Certificate computername.domain.com and will be renewed frequently. I would like to stop discovery for them. Since we have plenty of servers, I don't see Group, Certificate name option would be appropriate. I see one possible way is to Override through Issued By option but I am not sure how to implement that. Can some one Please help on this or tell me if there is any other way to achieve it ? Thanks a lot !]]> Thu, 09 Feb 2012 05:00:05 GMT http://www.systemcentercentral.com/PackCatalog/PackCatalogDetails/tabid/145/indexId/24860/currentpage/1/Default.aspx#comment-1589
1. It could be that your Intermediate Cert Store has been discovered, but is not showing in the "Certificate Stores Availability" view. This view only shows stores that are in a state Critical, Warning or Healthy, so it does not show stores that are in the state "Not monitored", (maybe because there is nothing to monitor?)

2. This pack discovers the "Registry" physical stores, but Enterprise PKI certificates are found in the "Enterprise" physical store, (at least this is true on my workstation). You can check this by enabling Show Physical Certificate Stores in the certificates MMC snap-in.

I have found a folder in the registry that appears to correspond to the Enterprise store: HKLM\SOFTWARE\Microsoft\EnterpriseCertificates (as opposed to SystemCertificates)
It looks like this Management Pack will need new discovery rules to find certificates in the Enterprise certificate stores.]]> Wed, 26 Oct 2011 13:50:39 GMT http://www.systemcentercentral.com/PackCatalog/PackCatalogDetails/tabid/145/indexId/24860/currentpage/1/Default.aspx#comment-1493
However, it’s been 2 days and the Intermediate cert store has still not been discovered, as far as I can tell (It doesn't show in the Certificate Stores Availability view). I need this so I the CRLs for our internal PKI can be monitored. Is there something I’m missing?]]> Thu, 20 Oct 2011 16:21:48 GMT http://www.systemcentercentral.com/PackCatalog/PackCatalogDetails/tabid/145/indexId/24860/currentpage/1/Default.aspx#comment-1479 Thu, 08 Sep 2011 21:06:42 GMT http://www.systemcentercentral.com/PackCatalog/PackCatalogDetails/tabid/145/indexId/24860/currentpage/1/Default.aspx#comment-1422 We have a CA which is issuing certificates for our clients. The CA is online and connected to the network.
Is there any way to use this MP to monitor certificates issued by the CA? This means, to see if the certificates are about to expire/valid and so on.
Thanks,
Izogen]]> Thu, 04 Aug 2011 16:04:32 GMT http://www.systemcentercentral.com/PackCatalog/PackCatalogDetails/tabid/145/indexId/24860/currentpage/1/Default.aspx#comment-1395 Wed, 20 Jul 2011 09:25:43 GMT http://www.systemcentercentral.com/PackCatalog/PackCatalogDetails/tabid/145/indexId/24860/currentpage/1/Default.aspx#comment-1375 Very few applications actually require using this specific kind of certificate store so check with your vendor or application owner before you implement service store specific monitoring.
Cheers
Raphael]]> Sun, 17 Jul 2011 19:12:33 GMT http://www.systemcentercentral.com/PackCatalog/PackCatalogDetails/tabid/145/indexId/24860/currentpage/1/Default.aspx#comment-1372 Might I ask what is the Win NT service stores?

Cheers!]]> Fri, 15 Jul 2011 10:49:46 GMT http://www.systemcentercentral.com/PackCatalog/PackCatalogDetails/tabid/145/indexId/24860/currentpage/1/Default.aspx#comment-1371 Wed, 08 Jun 2011 08:33:17 GMT http://www.systemcentercentral.com/PackCatalog/PackCatalogDetails/tabid/145/indexId/24860/currentpage/1/Default.aspx#comment-1315 Fri, 20 May 2011 10:13:32 GMT http://www.systemcentercentral.com/PackCatalog/PackCatalogDetails/tabid/145/indexId/24860/currentpage/2/Default.aspx#comment-1282
Regards,
Sven]]> Tue, 05 Apr 2011 16:55:45 GMT http://www.systemcentercentral.com/PackCatalog/PackCatalogDetails/tabid/145/indexId/24860/currentpage/2/Default.aspx#comment-1203
Thanks

Chris]]> Thu, 31 Mar 2011 20:56:00 GMT http://www.systemcentercentral.com/PackCatalog/PackCatalogDetails/tabid/145/indexId/24860/currentpage/2/Default.aspx#comment-1197
we are using this very good MP beginning in 2010 and like the work you’ve done.

we have a really complex envrionment in place with thousands of servers and many thousands of certificates. There are situations where the MP is not working as expected, or attributes of the certificate are not extracted as needed.

So we have 3 suggestions regarding this MP and would like to know if there’s time to discuss this or to implement this things in a future version of the MP?

Please let me know,

Markus



]]> Tue, 28 Dec 2010 09:32:24 GMT http://www.systemcentercentral.com/PackCatalog/PackCatalogDetails/tabid/145/indexId/24860/currentpage/2/Default.aspx#comment-1057


Thanks,

Sven]]> Thu, 09 Dec 2010 14:19:15 GMT http://www.systemcentercentral.com/PackCatalog/PackCatalogDetails/tabid/145/indexId/24860/currentpage/2/Default.aspx#comment-1031


In doing so, we found that now the PKI Certificate Validation reports have vanished and that option is no longer available to us in the SCOM Console. We've tried deleting the MP waiting a few minutes and re-importing the MP, but that does not seem to work.



How can we get the PKI Certificate Validation reports back?



Thanks,

Sven]]> Wed, 08 Dec 2010 21:01:09 GMT http://www.systemcentercentral.com/PackCatalog/PackCatalogDetails/tabid/145/indexId/24860/currentpage/2/Default.aspx#comment-1028
Alert Description:

The Microsoft Operations Manager Scheduler Data Source Module failed to initialize because the specified schedule interval number is out of range. Interval: 0 Minimum Unit Number: 1 Maximum Unit Number: 2419200 One or more workflows were affected by this. Workflow name: SystemCenterCentral.Utilities.Certificates.CertificateValidity.Monitor Instance name: Certificate *.ppdi.com Instance ID: {FBC7444F-8A52-0BE9-8375-F0E81D4F090C} Management group: US-MGMTGRP



Any ideas on how to stop this and why it is occurring?



thanks,

Sven]]> Mon, 29 Nov 2010 20:33:16 GMT http://www.systemcentercentral.com/PackCatalog/PackCatalogDetails/tabid/145/indexId/24860/currentpage/2/Default.aspx#comment-1022


I am needing to setup an initial alert at 14 days, then another at 3 days (before expiry). Would it be possible to do a minor update to set these monitor types to public so I am able to use this in proper cookdown style rather than exporting it as unsealed and hacking it?



Thanks in advance,

Kevin]]> Mon, 15 Nov 2010 15:25:27 GMT http://www.systemcentercentral.com/PackCatalog/PackCatalogDetails/tabid/145/indexId/24860/currentpage/2/Default.aspx#comment-1003 Tue, 31 Aug 2010 09:50:49 GMT http://www.systemcentercentral.com/PackCatalog/PackCatalogDetails/tabid/145/indexId/24860/currentpage/2/Default.aspx#comment-892 # ]]> Sat, 14 Aug 2010 09:34:38 GMT http://www.systemcentercentral.com/PackCatalog/PackCatalogDetails/tabid/145/indexId/24860/currentpage/2/Default.aspx#comment-856
Download is only working for registered users (registration is free).

On my IE8 I also needed to scroll back up to accept the terms of use after clicking on 'Download' before the file transfer was starting. A bit confusing...]]> Sat, 26 Jun 2010 10:07:49 GMT http://www.systemcentercentral.com/PackCatalog/PackCatalogDetails/tabid/145/indexId/24860/currentpage/2/Default.aspx#comment-741 Fri, 18 Jun 2010 11:39:34 GMT http://www.systemcentercentral.com/PackCatalog/PackCatalogDetails/tabid/145/indexId/24860/currentpage/2/Default.aspx#comment-733


Please help!



Cheers.]]> Fri, 18 Jun 2010 11:34:09 GMT http://www.systemcentercentral.com/PackCatalog/PackCatalogDetails/tabid/145/indexId/24860/currentpage/2/Default.aspx#comment-732 Fri, 18 Jun 2010 10:50:20 GMT http://www.systemcentercentral.com/PackCatalog/PackCatalogDetails/tabid/145/indexId/24860/currentpage/2/Default.aspx#comment-731 Fri, 18 Jun 2010 09:31:47 GMT http://www.systemcentercentral.com/PackCatalog/PackCatalogDetails/tabid/145/indexId/24860/currentpage/2/Default.aspx#comment-730
Your observation is absolutely correct. The MP will discover certificate stores - but only if the next step also discovers certificates (or CRLs) in them will you see those stores in anything other that 'Not Monitored' state. The reason for this is that the only monitors targeted at certificate stores are roll up ones. They don't initialize unless child objects (certificates) are present.

By coincidence: The next update to the MP (which I'll release hopefully in the next few days) will explain exactly that situation in the release notes.]]> Tue, 01 Jun 2010 19:19:05 GMT http://www.systemcentercentral.com/PackCatalog/PackCatalogDetails/tabid/145/indexId/24860/currentpage/2/Default.aspx#comment-695


we are trying to understand why the view "Certificate stores availability" include "not monitored" personal computer certificate store.

After some tests we realized that we have 2 different scenarios:

1. Servers with no certificates in computer personal store. (Event 3001 is logged in OpsMgr event log)

2. Servers with self-signed certificates.



Is this behavior is by design?



The MP solved us a lot of trouble in monitoring the expiration of certificates.



Thanks you.

]]> Tue, 01 Jun 2010 09:21:49 GMT http://www.systemcentercentral.com/PackCatalog/PackCatalogDetails/tabid/145/indexId/24860/currentpage/2/Default.aspx#comment-692


@ Mutino: If you can send me the output of the certutil.exe command for the store in question I'll check what is going on:

certutil.exe -v -verifystore [store key name]

And please let me know what locale settings you have on that server. My email: raburri [at] bluewin [dot] ch



@ Larry: Very good question. In this MP, all monitors and discoveries for certificates and CRLs use the same probe action: CertUtil output probe (VBScript). By means of cookdown all these are fed upon a single run of the script. If the frequency was overridable you'd have to make sure that you changed it to the same value for all three discoveries and four monitors. So I left the override out beacuse I feared that people would inadvertedly break cookdown. That was the idea anyhow - it turned out that the discoveries and monitors run on two different intervals (one for all discoveries and one for all monitors). If you send me your email address, we can have an offline talk about how to improve this for the next update.]]> Thu, 06 May 2010 16:49:07 GMT http://www.systemcentercentral.com/PackCatalog/PackCatalogDetails/tabid/145/indexId/24860/currentpage/2/Default.aspx#comment-653


I do have one question, though. Was there any specific reason for having the default certificate and CRL discoveries hard coded to run once every 3456 seconds, but not be able to override it? We tend to set most discoveries to around once a day or more as we have a fairly large environment, but these discoveries don't give that option. The discovery for the personal certificate STORE allows us to override it (although it's value of 86310 is just fine where it is), but the cert and CLR discoveries do not. I know that we can technically just create new 'mirrored' discoveries in the override pack to set different times, but I was wondering if there was some other logic in using these particular times or if you had any plans of updating the pack to allow for these overrides.





Thanks!



Larry]]> Thu, 06 May 2010 15:47:31 GMT http://www.systemcentercentral.com/PackCatalog/PackCatalogDetails/tabid/145/indexId/24860/currentpage/2/Default.aspx#comment-652


The cert works fine and the clocks are all synced to the correct time.

]]> Thu, 06 May 2010 14:02:56 GMT http://www.systemcentercentral.com/PackCatalog/PackCatalogDetails/tabid/145/indexId/24860/currentpage/2/Default.aspx#comment-651 Tue, 04 May 2010 03:00:56 GMT http://www.systemcentercentral.com/PackCatalog/PackCatalogDetails/tabid/145/indexId/24860/currentpage/3/Default.aspx#comment-647 Mon, 19 Apr 2010 15:57:37 GMT http://www.systemcentercentral.com/PackCatalog/PackCatalogDetails/tabid/145/indexId/24860/currentpage/3/Default.aspx#comment-626


Does this MP work if we have W2k8 R2 PKI Servers?]]> Mon, 19 Apr 2010 11:44:51 GMT http://www.systemcentercentral.com/PackCatalog/PackCatalogDetails/tabid/145/indexId/24860/currentpage/3/Default.aspx#comment-625
Data Warehouse failed to deploy database component. Failed to deploy Data Warehouse component. The operation will be retried.

Exception 'SqlScriptException': Batch ordinal: 2; Exception: There is already an object named 'SystemCenterCentral_Utilities_Certificates_TwoGroupCustomConfigurationReportDataGet' in the database.





One or more workflows were affected by this.





Workflow name: Microsoft.SystemCenter.DataWarehouse.Deployment.Component



Instance name: rtprms01.americas.ppdi.local



Instance ID: {5DE412EC-E51D-8DBA-0E8A-3AC5EE2BE221}



Management group: US-MGMTGRP



These alert correlate with Event ID 31565, which is why we are receiving these alerts. It seems there may be some residual component left in the DB from MP v1.0.0.260.

I had to delete the MP v1.0.0.270 to stop these alerts from happening.



Any ideas?



Thanks,

Sven]]> Fri, 26 Mar 2010 18:37:58 GMT http://www.systemcentercentral.com/PackCatalog/PackCatalogDetails/tabid/145/indexId/24860/currentpage/3/Default.aspx#comment-583 Mon, 22 Mar 2010 18:12:35 GMT http://www.systemcentercentral.com/PackCatalog/PackCatalogDetails/tabid/145/indexId/24860/currentpage/3/Default.aspx#comment-575


Thanks,

Sven]]> Thu, 18 Mar 2010 19:46:21 GMT http://www.systemcentercentral.com/PackCatalog/PackCatalogDetails/tabid/145/indexId/24860/currentpage/3/Default.aspx#comment-566


I will e-mail you at the address you listed.



Thanks,

Sven]]> Thu, 18 Mar 2010 19:45:37 GMT http://www.systemcentercentral.com/PackCatalog/PackCatalogDetails/tabid/145/indexId/24860/currentpage/3/Default.aspx#comment-565
Sorry for the delay. Are you using SCOM SP1 or RTM by any chance? If yes, drop me an email on {raburri (at) bluewin (dot) ch} I might have the solution to your problem.

Raphael]]> Thu, 18 Mar 2010 15:11:24 GMT http://www.systemcentercentral.com/PackCatalog/PackCatalogDetails/tabid/145/indexId/24860/currentpage/3/Default.aspx#comment-561
"Date: 3/11/2010 7:41:38 AM

Application: System Center Operations Manager 2007

Application Version: 6.0.6278.0

Severity: Error

Message: Cannot update dependant parameters.



Microsoft.Reporting.WinForms.ReportServerException: An error has occurred during report processing. (rsProcessingAborted) ---> Microsoft.Reporting.WinForms.ReportServerException: Query execution failed for data set 'ColumnList'. (rsErrorExecutingCommand) ---> Microsoft.Reporting.WinForms.ReportServerException: Procedure or function Microsoft_SystemCenter_DataWarehouse_Report_Library_ReportColumnList has too many arguments specified.

--- End of inner exception stack trace ---

--- End of inner exception stack trace ---

at Microsoft.Reporting.WinForms.ServerReport.SetParameters(IEnumerable`1 parameters)

at Microsoft.EnterpriseManagement.Mom.Internal.UI.Reporting.Parameters.ReportParameterBlock.OnValueChangedJob(Object sender, ConsoleJobEventArgs args)

Microsoft.Reporting.WinForms.ReportServerException: Query execution failed for data set 'ColumnList'. (rsErrorExecutingCommand) ---> Microsoft.Reporting.WinForms.ReportServerException: Procedure or function Microsoft_SystemCenter_DataWarehouse_Report_Library_ReportColumnList has too many arguments specified.

--- End of inner exception stack trace ---

Microsoft.Reporting.WinForms.ReportServerException: Procedure or function Microsoft_SystemCenter_DataWarehouse_Report_Library_ReportColumnList has too many arguments specified."



Any ideas on this?



Thanks,

Sven

]]> Thu, 11 Mar 2010 17:50:13 GMT http://www.systemcentercentral.com/PackCatalog/PackCatalogDetails/tabid/145/indexId/24860/currentpage/3/Default.aspx#comment-535 Tue, 15 Dec 2009 15:48:53 GMT http://www.systemcentercentral.com/PackCatalog/PackCatalogDetails/tabid/145/indexId/24860/currentpage/3/Default.aspx#comment-395 Tue, 15 Dec 2009 14:45:15 GMT http://www.systemcentercentral.com/PackCatalog/PackCatalogDetails/tabid/145/indexId/24860/currentpage/3/Default.aspx#comment-393 Mon, 02 Nov 2009 22:38:29 GMT http://www.systemcentercentral.com/PackCatalog/PackCatalogDetails/tabid/145/indexId/24860/currentpage/3/Default.aspx#comment-318 Mon, 19 Oct 2009 19:36:28 GMT http://www.systemcentercentral.com/PackCatalog/PackCatalogDetails/tabid/145/indexId/24860/currentpage/3/Default.aspx#comment-285 Fri, 16 Oct 2009 22:32:44 GMT http://www.systemcentercentral.com/PackCatalog/PackCatalogDetails/tabid/145/indexId/24860/currentpage/3/Default.aspx#comment-283 Thu, 15 Oct 2009 16:02:02 GMT http://www.systemcentercentral.com/PackCatalog/PackCatalogDetails/tabid/145/indexId/24860/currentpage/3/Default.aspx#comment-277 Thu, 15 Oct 2009 14:40:39 GMT http://www.systemcentercentral.com/PackCatalog/PackCatalogDetails/tabid/145/indexId/24860/currentpage/3/Default.aspx#comment-276 Thu, 03 Sep 2009 22:06:35 GMT http://www.systemcentercentral.com/PackCatalog/PackCatalogDetails/tabid/145/indexId/24860/currentpage/3/Default.aspx#comment-200 Thu, 03 Sep 2009 00:15:16 GMT http://www.systemcentercentral.com/PackCatalog/PackCatalogDetails/tabid/145/indexId/24860/currentpage/3/Default.aspx#comment-197 Wed, 02 Sep 2009 22:31:53 GMT http://www.systemcentercentral.com/PackCatalog/PackCatalogDetails/tabid/145/indexId/24860/currentpage/3/Default.aspx#comment-196 Wed, 02 Sep 2009 18:36:08 GMT http://www.systemcentercentral.com/PackCatalog/PackCatalogDetails/tabid/145/indexId/24860/currentpage/3/Default.aspx#comment-195 Tue, 01 Sep 2009 12:08:06 GMT http://www.systemcentercentral.com/PackCatalog/PackCatalogDetails/tabid/145/indexId/24860/currentpage/4/Default.aspx#comment-193 Tue, 01 Sep 2009 11:53:32 GMT http://www.systemcentercentral.com/PackCatalog/PackCatalogDetails/tabid/145/indexId/24860/currentpage/4/Default.aspx#comment-192 Tue, 01 Sep 2009 09:32:42 GMT http://www.systemcentercentral.com/PackCatalog/PackCatalogDetails/tabid/145/indexId/24860/currentpage/4/Default.aspx#comment-191 Tue, 01 Sep 2009 08:23:56 GMT http://www.systemcentercentral.com/PackCatalog/PackCatalogDetails/tabid/145/indexId/24860/currentpage/4/Default.aspx#comment-190