Fixing SCOM Error: OpsMgr was unable to set up a communications channel to FQDN and there are no failover hosts

Situation: When install SCOM Agent on an untrusted computer, you may receive this event:

Log Name:      Operations Manager

Source:        OpsMgr Connector

Event ID:      21016

Description: OpsMgr was unable to set up a communications channel to FQDN and there are no failover hosts.  Communication will resume when FQDN is available and communication from this computer is allowed.

Troubleshooting: If you just imported CA and untrusted client certificates on the untrusted computer, restart al SCOM service on SCOM Server. That should fix the problem and the Event Viewer will show Event ID: 21019

Description:

OpsMgr has returned to communicating with it’s primary host FQDN.

Fixing SCOM error: the agent is not authorized to communicate with the server, or the server has not received configuration

Situation: When install SCOM Agent on an untrusted computer, you may receive this event:

Log Name:      Operations Manager

Source:        OpsMgr Connector

Event ID:      20070

Description: The OpsMgr Connector connected to FQND, but the connection was closed immediately after authentication occurred.  The most likely cause of this error is that the agent is not authorized to communicate with the server, or the server has not received configuration.  Check the event log on the server for the presence of 20000 events, indicating that agents which are not approved are attempting to connect.

Troubleshooting: If you just imported CA and untrusted client certificates on the untrusted computer, restart al SCOM service on SCOM Server. That should fix the problem and the Event Viewer will show Event ID: 21019

Description:

OpsMgr has returned to communicating with it’s primary host FQDN.

Fixing SCOM Agent error: the connection was closed immediately after authentication occurred

Situation: When install SCOM Agent on an untrusted computer, you may receive this event:

Log Name:      Operations Manager

Source:        OpsMgr Connector

Event ID:      20070

Description: The OpsMgr Connector connected to FQND, but the connection was closed immediately after authentication occurred.  The most likely cause of this error is that the agent is not authorized to communicate with the server, or the server has not received configuration.  Check the event log on the server for the presence of 20000 events, indicating that agents which are not approved are attempting to connect.

Troubleshooting: If you just imported CA and untrusted client certificates on the untrusted computer, restart al SCOM service on SCOM Server. That should fix the problem and the Event Viewer will show Event ID: 21019

Description:

OpsMgr has returned to communicating with it’s primary host FQDN.

Troubleshooting Operations Manager Event ID 20070 and 20016

Situation: When install SCOM Agent on an untrusted computer, you may receive these events:

Log Name:      Operations Manager

Source:        OpsMgr Connector

Event ID:      20070

Description: The OpsMgr Connector connected to FQND, but the connection was closed immediately after authentication occurred.  The most likely cause of this error is that the agent is not authorized to communicate with the server, or the server has not received configuration.  Check the event log on the server for the presence of 20000 events, indicating that agents which are not approved are attempting to connect.

Event ID:      21016

Description: OpsMgr was unable to set up a communications channel to FQDN and there are no failover hosts.  Communication will resume when FQDN is available and communication from this computer is allowed.

Troubleshooting: If you just imported CA and untrusted client certificates on the untrusted computer, restart al SCOM service on SCOM Server. That should fix the problem and the Event Viewer will show Event ID: 21019

Description:

OpsMgr has returned to communicating with it’s primary host FQDN.

Fixing Problem to setup email Notification Channel on SCOM 2019

problem: We are running SCOM 2019. We have a problem to setup email Notification Channel with Failed to save the Notification Channel error.

Note: The following information was gathered when the operation was attempted. The information may appear cryptic but provides context for the error. The application will continue to run.

System.InvalidOperationException: The endpoint could not be inserted. See inner exception for details. —> Microsoft.EnterpriseManagement.Common.ManagementPackException: Database error. MPInfra_p_ManagementPackInstall failed with exception:
Database error. MPInfra_p_ManagementPackInstall failed with exception:
[SQL Error Code: -2146232060][MP ID: dcfdedc4-68bd-42b4-1e9a-ba94b1577732][MP Version: 10.19.10050.0][MP PKT: ] Procedure or function p_MPImportXML has too many arguments specified.
at Microsoft.EnterpriseManagement.Common.Internal.ServiceProxy.HandleFault(String methodName, Message message)
at Microsoft.EnterpriseManagement.Common.Internal.MonitoringNotificationServiceProxy.UpsertNotificationEndpoint(String name, String displayName, String description, String languageCode, String endpointImplementation, Int32 innerNotificationEndpoint, Boolean isUpdate)
at Microsoft.EnterpriseManagement.MonitoringNotificationManagement.UpsertNotificationEndpoint(NotificationEndpoint notificationEndpoint, ManagementGroup managementGroup, Boolean isUpdate)
at Microsoft.EnterpriseManagement.MonitoringNotificationManagement.UpdateNotificationEndpoint(NotificationEndpoint notificationEndpoint)
at Microsoft.EnterpriseManagement.Administration.NotificationEndpoint.Update()
— End of inner exception stack trace —
at Microsoft.EnterpriseManagement.Administration.NotificationEndpoint.Update()
at Microsoft.EnterpriseManagement.Mom.Internal.UI.Notification.ChannelCompletionPage.CommitChanges(Object sender, DoWorkEventArgs e)
: Database error. MPInfra_p_ManagementPackInstall failed with exception:
Database error. MPInfra_p_ManagementPackInstall failed with exception:
[SQL Error Code: -2146232060][MP ID: dcfdedc4-68bd-42b4-1e9a-ba94b1577732][MP Version: 10.19.10050.0][MP PKT: ] Procedure or function p_MPImportXML has too many arguments specified.

I have try to restart all System center services and restart the server, but that doesn’t fix the problem.

Possible causes: upgrading to UR2 of SCOM 2019 or database or the table structure changing.

Resolution: Install KB4558752 update. That fixes the problem.

VPN users can’t access AWS Tunnel with aged-out

Situation: The client has Paloalto Firewall running GloablProtect VPN and Site-to-site VPN to AWS tunnel. The user on office can’t access the AWS tunnel but VPN user.

Troubleshooting: 1. Monitor shows aged-out.

2. The detail view shows, bytes received is 0.

Conclusion: AWS blocks VPN IP addresses. Have AWS configure their route for VPN IP addresses.

Paloalto Firewall Monitor doesn’t shows the traffics

Situation: The client configured Paloalto Firewall to allow VPN users accessing AWS Tunnel. However, the VPN home users can’t access the AWS tunnel and Monitor doesn’t show any traffics.

Troubleshooting: You need to configure GlobalProtect VPN Gateway or add the AWS Tunnel IP addresses to the GlobalProtect Gateway. Please refer to this post: Configure Paloalto Firewall to allow VPN users accessing another IPSec Tunnel

MOMCertImport: ImportPFXCertificate failed: Catastrophic failure Error code: 8000FFFF

Situation: When running MOMCertImport.exe to import a certificate., you may receive this message:

The certificate is valid, but importing it to certificate store failed.
Error description: Catastrophic failure
Error code:8000FFFF

    ImportPFXCertificate failed: Catastrophic failure
    Error code: 8000FFFF

This video shows some resolutions.

Case 1: When exporting the certificate,

Make sure “Include all certificates in the certification path if possible” is unchecked in the export wizard.

Case 2: When exporting the certificate,

Make sure “Enable certificate privacy” is unchecked in the export wizard.

Case 3: Make sure you enter the correct password.

Please view this step by step video:

Remote Desktop “Please wait” after Windows Update

Situation: After Windows Update, the user can’t login his Remote Desktop running on Windows 10. This video provides some resolutions.

1.Have someone login the computer locally or use different administrator account login the remote Desktop.

2.Open the Task Manager by right clicking on Task bar and selecting Task Manager.

3. With the Task Manager open, click More details.

4. Click on Users tab

5. Right click on the user who has the problem.

6. Click Sign off.

7. Have the user try to login.

Please view this step by step video: