IT Management Suite

Hello Guys,

I am working in a clients place. There are 4 NS in Hierarchy.

One parent & other 3 child. One for only management purpose.

Now when i am setting up the Internet Gateway, I am having a problem.

I have generated site server certificate using AeXsiteservergen tool from NS of one of the child.

Now when i am deploying it on a site server, it tells me that  "windows does not have enough information to verify this certificate".

I have genrate the certificate following HOWTO93155.

I am getting this certificate error. Please help me out with these thing.

I am having another problem for agent certificate thing. Do i need to generate a certificate for Agents also who are going to use Internet Gateway??

Will it be pushed when i will push SMA on all the agents???

Please help.

I have followed Admin Guide & CEM white paper but nowhere it is written clearly.

Please help.

Thanks.

KS

Hello,

This site server where you are trying to push certificate to is intended to serve CEM agents? For Alta release there is a way more convenient feature - CEM Site Server policy. This policy would be applied in case site server is assigned to default internet site. Then if there is no SSL binding on site server, that would be created and SSL cert assigned (certificate signed by master cert) this basically means that if your agents have CEM policy those would automatically trust that site server.

P.S if you do have SSL binding in place, you can still force policy to replace your current certificate.

No, you don't have to generate certificates for agents, all you need is to establish HTTPs(cert can be installed at push) connection between your agents and NS and then apply CEM policy, all necessary certificates would be applied

Regards,

Denis

Hi Salnikov,

I am using HTTPS, and i can see on Agent machine that it is served by Site server.

The site server i intend to push is for LAN clients as well as for the CEM client with Task service & Package service both installed on it.

Can you tell me how to create a CEM site server policy?

I am using ITMS 7.5 with all the latest Hot Fix installed. 

Hello,

CEM site server policy was introduced in Alta, as I mentioned.