SUSE 15 into SCOM Issue - Certificate signing operation was not successful

Question

Hello,

I have an issue with SUSE 15.5 to add to SCOM 2019 UR6. Got error below, maybe someone knows where to search to resolve this and somehow add it to SCOM?

AGENT:

scx-1.9.0-0.universalr.1.s.x64.sh
scxadmin -version 
Version: 1.9.0-0 (Release_Build - 20240228L)

SUSE :

cat /etc/os-release 
NAME="SLES" 
VERSION="15-SP5" 
VERSION_ID="15.5" 
PRETTY_NAME="SUSE Linux Enterprise Server 15 SP5" 
ID="sles" 
ID_LIKE="suse" 
ANSI_COLOR="0;32"
CPE_NAME="cpe:/o:suse:sles:15:sp5" 
DOCUMENTATION_URL="https://documentation.suse.com/" 

ERROR:

Task invocation failed with error code -2130771918. Error message was: The SCXCertWriteAction module encountered a DoProcess exception. The workflow "Microsoft.Unix.Agent.GetCert.Task" has been unloaded. 
Module: SCXCertWriteAction 
Location: DoProcess 
Exception type: ScxCertLibException 
Exception message: Unable to create certificate context 
; {ASN1 bad tag value met. 
} 
Additional data: Sudo path: /etc/opt/microsoft/scx/conf/sudodir/ 
Management group: XXXX 
Workflow name: Microsoft.Unix.Agent.GetCert.Task 
Object name: UNIX/Linux Monitorig Resource Pool 
Object ID: {D1F6B330-3198-0624-BC7A-47159FAE68E7} 

VISUDO:

 26 # Agent maintenance 
 27 ## Certificate signing 
 28 scxmaint ALL=(root) NOPASSWD: /bin/sh -c cp /tmp/scx-scxmaint/scx.pem /etc/opt/microsoft/scx/ssl/scx.pem; rm -rf /tmp/scx-scxmaint; /opt/microsoft/scx/bin/tools/scxadmin -restart 
 29 scxmaint ALL=(root) NOPASSWD: /bin/sh -c cat /etc/opt/microsoft/scx/ssl/scx.pem 
 30 scxmaint ALL=(root) NOPASSWD: /bin/sh -c if test -f /opt/microsoft/omsagent/bin/service_control; then cp /tmp/scx-scxmaint/omsadmin.conf /etc/opt/microsoft/omsagent/scom/conf/omsadmin.conf; /opt/micros    oft/omsagent/bin/service_control restart scom; fi 
 31 scxmon ALL=(root) NOPASSWD: /bin/sh -c cp /tmp/scx-scxmaint/scx.pem /etc/opt/microsoft/scx/ssl/scx.pem; rm -rf /tmp/scx-scxmaint; /opt/microsoft/scx/bin/tools/scxadmin -restart 
 32 scxmon ALL=(root) NOPASSWD: /bin/sh -c cat /etc/opt/microsoft/scx/ssl/scx.pem 
 33 scxmon ALL=(root) NOPASSWD: /bin/sh -c if test -f /opt/microsoft/omsagent/bin/service_control; then cp /tmp/scx-scxmaint/omsadmin.conf /etc/opt/microsoft/omsagent/scom/conf/omsadmin.conf; /opt/microsof    t/omsagent/bin/service_control restart scom; fi 
 34 
 37 
 38 ## Install or upgrade 
 39 # Compiler mitigated agent version changes 
 40 
 41 scxmaint ALL=(root) NOPASSWD: /bin/sh -c sh /tmp/scx-scxmaint/scx-1.[5-9].[0-9]-[0-9].universal[[\:alpha\:]].[[\:digit\:]].s.x[6-8][4-6].sh --install --enable-opsmgr; EC=$?; cd /tmp; rm -rf /tmp/scx-sc    xmaint; exit $EC 
 42 scxmaint ALL=(root) NOPASSWD: /bin/sh -c sh /tmp/scx-scxmaint/scx-1.[5-9].[0-9]-[0-9]-[0-9].universal[[\:alpha\:]].[[\:digit\:]].x[6-8][4-6].sh --install --enable-opsmgr; EC=$?; cd /tmp; rm -rf /tmp/sc    x-scxmaint; exit $EC 
 43 scxmaint ALL=(root) NOPASSWD: /bin/sh -c sh /tmp/scx-scxmaint/scx-1.[5-9].[0-9]-[0-9].universal[[\:alpha\:]].[[\:digit\:]].x[6-8][4-6].sh --install --enable-opsmgr; EC=$?; cd /tmp; rm -rf /tmp/scx-scxm    aint; exit $EC 
 44 scxmaint ALL=(root) NOPASSWD: /bin/sh -c sh /tmp/scx-scxmaint/scx-1.[5-9].[0-9]-[0-9][0-9][0-9].universal[[\:alpha\:]].[[\:digit\:]].x[6-8][4-6].sh --install --enable-opsmgr; EC=$?; cd /tmp; rm -rf /tm    p/scx-scxmaint; exit $EC 
 45 scxmaint ALL=(root) NOPASSWD: /bin/sh -c sh /tmp/scx-scxmaint/scx-1.[5-9].[0-9]-[0-9].universal[[\:alpha\:]].[[\:digit\:]].s.x[6-8][4-6].sh --upgrade --enable-opsmgr; EC=$?; cd /tmp; rm -rf /tmp/scx-sc    xmaint; exit $EC 
 46 scxmaint ALL=(root) NOPASSWD: /bin/sh -c sh /tmp/scx-scxmaint/scx-1.[5-9].[0-9]-[0-9]-[0-9].universal[[\:alpha\:]].[[\:digit\:]].x[6-8][4-6].sh --upgrade --enable-opsmgr; EC=$?; cd /tmp; rm -rf /tmp/sc    x-scxmaint; exit $EC 
 47 scxmaint ALL=(root) NOPASSWD: /bin/sh -c sh /tmp/scx-scxmaint/scx-1.[5-9].[0-9]-[0-9].universal[[\:alpha\:]].[[\:digit\:]].x[6-8][4-6].sh --upgrade --enable-opsmgr; EC=$?; cd /tmp; rm -rf /tmp/scx-scxm    aint; exit $EC 
 48 scxmaint ALL=(root) NOPASSWD: /bin/sh -c sh /tmp/scx-scxmaint/scx-1.[5-9].[0-9]-[0-9][0-9][0-9].universal[[\:alpha\:]].[[\:digit\:]].x[6-8][4-6].sh --upgrade --enable-opsmgr; EC=$?; cd /tmp; rm -rf /tm    p/scx-scxmaint; exit $EC 
 49 
 50 ## Uninstall 
 51 #scxmaint ALL=(root) NOPASSWD: /bin/sh -c /opt/microsoft/scx/bin/uninstall 
 52 scxmaint ALL=(root) NOPASSWD: /bin/sh -c if test -f /opt/microsoft/omsagent/bin/omsadmin.sh; then if test "$(/opt/microsoft/omsagent/bin/omsadmin.sh -l | grep scom | wc -l)" \= "1" && test "$(/opt/micr    osoft/omsagent/bin/omsadmin.sh -l | wc -l)" \= "1" || test "$(/opt/microsoft/omsagent/bin/omsadmin.sh -l)" \= "No Workspace"; then /opt/microsoft/omsagent/bin/uninstall; else /opt/microsoft/omsagent/bi    n/omsadmin.sh -x scom; fi; else /opt/microsoft/scx/bin/uninstall; fi 
 53 
 54 ## Log file monitoring 
 55 scxmon ALL=(root) NOPASSWD: /opt/microsoft/scx/bin/scxlogfilereader -p 

Answer 1

Hi,

I’m sorry to hear that you’re experiencing this issue. The error message indicates that the SCXCertWriteAction module encountered a DoProcess exception, which caused the workflow “Microsoft.Unix.Agent.GetCert.Task” to be unloaded.

Here are a few potential causes and solutions:

Sudoers permissions are missing: Check and verify that the sudoers are set up correctly.

ASN1 bad tag value met: This error can occur when there’s an issue with the certificate’s ASN1 encoding. You might need to regenerate the certificate.

If these suggestions don’t resolve your issue, I recommend referring to the following troubleshooting guides:

Troubleshoot UNIX/Linux agent discovery in Operations Manager

SCOM 2012 Troubleshooting: UNIX/Linux Agent Discovery