监视向此管理服务器进行身份验证失败的尝试。
设备、连接器或代理一次或多次尝试向此管理服务器验证身份失败。
身份验证失败可能是由以下原因之一导致的:
远程证书不可信
设备正在等待审批
证书导入不正确
管理服务器和尝试验证身份的计算机被配置为使用不同的身份验证设置
查看警报详细信息以确定触发警报的事件。
针对事件 20072:查看警报详细信息以确定使用不受信任的证书的计算机。将源计算机配置为使用可信证书或将运行 Operations Manager 的服务器配置为信任颁发证书的证书颁发机构。有关配置证书的信息,请参考以下文章:
Managing Certificates in Operations Manager(在 Operations Manager 中管理证书)( http://go.microsoft.com/fwlink/?LinkID=824998)。
TechNet 上 Windows Server 主题中的“管理证书”( http://technet.microsoft.com/zh-cn/library/cc771377.aspx)。
针对事件 20002:在操作控制台中打开“管理”区域,然后单击“挂起的管理”。根据需要选择列出的对象并单击“批准”或“拒绝”。
针对事件 21003:确保将证书颁发机构(为警报详细信息中标识的计算机颁发了证书)的根证书导入到受信任的根证书颁发机构。有关导入受信任根证书的说明,请参阅“Windows 计算机的身份验证和数据加密”( http://go.microsoft.com/fwlink/?LinkId=161162) 中针对你的证书颁发机构类型的主题。
针对事件 21011:检查组策略和本地安全策略中计算机的身份验证设置。
Target | Microsoft.SystemCenter.ManagementServer | ||
Parent Monitor | Microsoft.SystemCenter.HealthService.SecurityRollup | ||
Category | SecurityHealth | ||
Enabled | True | ||
Alert Generate | True | ||
Alert Severity | Warning | ||
Alert Priority | High | ||
Alert Auto Resolve | True | ||
Monitor Type | Microsoft.Windows.RepeatedEventLogTimer2StateMonitorType | ||
Remotable | True | ||
Accessibility | Public | ||
Alert Message |
| ||
RunAs | Default |
<UnitMonitor ID="Microsoft.SystemCenter.ManagementServer.Security.FailedAuthenticationCheck" Accessibility="Public" Enabled="true" Target="SCLibrary!Microsoft.SystemCenter.ManagementServer" ParentMonitorID="Microsoft.SystemCenter.HealthService.SecurityRollup" Remotable="true" Priority="Normal" TypeID="Windows!Microsoft.Windows.RepeatedEventLogTimer2StateMonitorType" ConfirmDelivery="true">
<Category>SecurityHealth</Category>
<AlertSettings AlertMessage="Microsoft.SystemCenter.ManagementServer.Security.FailedAuthenticationCheck_AlertMessageResourceID">
<AlertOnState>Warning</AlertOnState>
<AutoResolve>true</AutoResolve>
<AlertPriority>High</AlertPriority>
<AlertSeverity>Warning</AlertSeverity>
</AlertSettings>
<OperationalStates>
<OperationalState ID="Microsoft.SystemCenter.ManagementServer.Security.FailedAuthenticationCheck.Warning" MonitorTypeStateID="RepeatedEventRaised" HealthState="Warning"/>
<OperationalState ID="Microsoft.SystemCenter.ManagementServer.Security.FailedAuthenticationCheck.Success" MonitorTypeStateID="TimerEventRaised" HealthState="Success"/>
</OperationalStates>
<Configuration>
<RepeatedComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</RepeatedComputerName>
<RepeatedLogName>Operations Manager</RepeatedLogName>
<RepeatedExpression>
<And>
<Expression>
<Or>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="UnsignedInteger">20072</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="UnsignedInteger">21009</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="UnsignedInteger">20002</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="UnsignedInteger">21002</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="UnsignedInteger">21003</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="UnsignedInteger">21011</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
</Or>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="String">PublisherName</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="String">OpsMgr Connector</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
</And>
</RepeatedExpression>
<Consolidator>
<ConsolidationProperties/>
<TimeControl>
<WithinTimeSchedule>
<Interval>300</Interval>
</WithinTimeSchedule>
</TimeControl>
<CountingCondition>
<Count>3</Count>
<CountMode>OnNewItemTestOutputRestart_OnTimerSlideByOne</CountMode>
</CountingCondition>
</Consolidator>
<TimerWaitInSeconds>3600</TimerWaitInSeconds>
</Configuration>
</UnitMonitor>