This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(64, 5%, 16%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESR%3C/text%3E%3C/svg%3E)
Hi,
Our SCOM Gateway servers went to grayed state and we got the heartbeat failure alert, when we check out the server's event ID and it says 20071 and 21016 and we could find in other blogs that it because of some authentication failure due to some MS server name mismatch in GW server's registry entry.
We have checked the GW server's registry entry as well, it's showing the Authentication name and Network name as same only.
we have tried restarting the SCOM services in SCOM MS servers as well as SCOM GW server. Cleared the cache as well.
Re-run the MomCertImport tool as well.
Please look into it and help us on this...
Is the certificate chain OK on both the GW and MS that the GWs are talking to?
For example, we have an intermediate CA at work and then the root CA server here at my work. The GW cert is issued by the intermediate CA and the root CA server is at the top of the cert chain. The certs for the intermediate AND root CAs have to be on the GW and the MS (as well as valid)
Check the cert chain by going into the Certificates mmc snap-in and then check the Certificate Path in the properties of the certificate. Here's a path from one of our gateways, the gateway cert is at the bottom, the intermediate CA is in the middle and the root is at the top. You can see that each cert has a cert icon/avatar. If the cert was expired/bad or there are other issues, you'd see a different icon.
Hi @Shiva Ravichandran ,
did you check the certificates of the Gateways? Can it be that they have expired?
Can you please also check the ports to the management Servers, are they still open?
If you want to check your certificates with a script, you can copy the script from here (I have posted it for another user):
Workgroup server showing failed to connect alert in SCOM 2019
https://learn.microsoft.com/en-us/answers/questions/1141431/workgroup-server-showing-failed-to-connect-alert-i.html
Please let me know how it looks.
(If the reply was helpful please don't forget to upvote and/or accept as answer, thank you)
Regards
Stoyan Chalakov
HI @SChalakov
I have checked the certificate in gateway servers, they're fine and the port 5723 is also allowing fine from Gateway to Management server
Hi,
have you tried emptying the cache and restarting the MMA?
Regards,
Stoyan