Expiration Check of Certificate Used for Authentication

Microsoft.SystemCenter.HealthService.CommunicationCertificateExpirationCheck (UnitMonitor)

此監視會檢查用於驗證之憑證的狀態,並在憑證即將到期時傳送警示。

Knowledge Base article:

摘要

用於驗證的憑證即將過期。 此憑證是用於自此 System Center 管理健全狀況服務至其他 System Center 管理健全狀況服務之以憑證為基礎的驗證。

此憑證與使用 MOMCertImport.exe 公用程式匯入之憑證相同。

一旦憑證過期,代理程式或管理伺服器將無法與管理群組通訊或報告資料到管理群組。

原因

憑證即將過期。 在憑證過期後,System Center 管理健全狀況服務將無法驗證其他 System Center 管理健全狀況服務。

解決方式

取得新的憑證並使用 MOMCertImport.exe 公用程式將其匯入。

其他

如需在 Operations Manager 中匯入和使用憑證的詳細資訊,請參閱 Managing Certificates in Operations Manager (管理 Operations Manager 中的憑證) (http://go.microsoft.com/fwlink/?LinkID=227146)。

如需使用 CertGenWizard.exe (無法支援要求多個憑證的工具) 的詳細資訊,請參閱部落格文章 Obtaining Certificates for Non-Domain Joined Agents Made Easy With Certificate Generation Wizard (使用憑證產生精靈簡化取得未加入網域代理程式憑證的工作) (http://go.microsoft.com/fwlink/?LinkId=195439)。

Element properties:

TargetMicrosoft.SystemCenter.HealthService
Parent MonitorSystem.Health.ConfigurationState
CategoryConfigurationHealth
EnabledTrue
Alert GenerateTrue
Alert SeverityError
Alert PriorityHigh
Alert Auto ResolveTrue
Monitor TypeMicrosoft.Windows.2SingleEventLog2StateMonitorType
RemotableTrue
AccessibilityPublic
Alert Message
System Center 管理健全狀況服務驗證憑證已過期
{0}
RunAsDefault

Source Code:

<UnitMonitor ID="Microsoft.SystemCenter.HealthService.CommunicationCertificateExpirationCheck" Accessibility="Public" Enabled="true" Target="SCLibrary!Microsoft.SystemCenter.HealthService" ParentMonitorID="Health!System.Health.ConfigurationState" Remotable="true" Priority="Normal" TypeID="Windows!Microsoft.Windows.2SingleEventLog2StateMonitorType" ConfirmDelivery="true">
<Category>ConfigurationHealth</Category>
<AlertSettings AlertMessage="Microsoft.SystemCenter.HealthService.CommunicationCertificateExpirationCheck_AlertMessageResourceID">
<AlertOnState>Warning</AlertOnState>
<AutoResolve>true</AutoResolve>
<AlertPriority>High</AlertPriority>
<AlertSeverity>Error</AlertSeverity>
<AlertParameters>
<AlertParameter1>$Data/Context/EventDescription$</AlertParameter1>
</AlertParameters>
</AlertSettings>
<OperationalStates>
<OperationalState ID="FirstEventRaised" MonitorTypeStateID="FirstEventRaised" HealthState="Warning"/>
<OperationalState ID="SecondEventRaised" MonitorTypeStateID="SecondEventRaised" HealthState="Success"/>
</OperationalStates>
<Configuration>
<FirstComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</FirstComputerName>
<FirstLogName>Operations Manager</FirstLogName>
<FirstExpression>
<And>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="UnsignedInteger">21020</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="String">PublisherName</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="String">OpsMgr Connector</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
</And>
</FirstExpression>
<SecondComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</SecondComputerName>
<SecondLogName>Operations Manager</SecondLogName>
<SecondExpression>
<And>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="UnsignedInteger">20053</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="String">PublisherName</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="String">OpsMgr Connector</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
</And>
</SecondExpression>
</Configuration>
</UnitMonitor>