Troubleshoot issues with Azure Monitor SCOM Managed Instance
This article describes the errors that might occur when you deploy or use Azure Monitor SCOM Managed Instance and how to resolve them.
Scenario: SCOM Managed Instance creation/deployment
General troubleshooting
- Ensure all the prerequisites are met. Creation issues may arise due to improper/incomplete prerequisites.
- Ensure you read/check the error message carefully. The error messages capture the issue/error in creation.
- Check the SCOM Setup logs link provided in the error message. Select the link to download the System Center Operations Manager setup logs. Analyze the logs to identify and resolve errors/failures.
- If you're unable to identify the issue with the above steps, sign in to the Virtual Machine Scale Sets instance and check the logs under C:\WindowsAzure\Logs\Plugins\Microsoft.Azure.SCOMMIServer.ScomServerForWindows<version>, which helps you identify the issue.
- If the issue persists, raise a support ticket with all relevant details [
correlation-id,subscription-id, and so on]
Issue: Resource group %ResourceGroupName% is managed by other Azure resource
Cause: Occurs when the ManagedBy property is set for the resource group.
Resolution: Provide another resource group with ManagedBy property as empty.
Issue: The subnet %SubnetName% selected is dedicated to another service
Cause: Occurs when the subnet has delegations.
Resolution: Provide a subnet, which isn't delegated to any other service.
Issue: Error when SCOM Managed Instance is unable to reach SQL Managed Instance %instance%
Cause: This error can be caused by any of the following reasons:
- Missing Line-of-sight visibility from SCOM Managed Instance VNet to SQL Managed Instance endpoint.
- Missing the right level of NSG rules to allow traffic over SQL Managed Instance public endpoint.
- MSI isn't added as Active Directory admin.
- SCOM Managed Instance might not have read permissions on the SQL Managed Instance.
- There might be an issue with your VNet/Region.
Resolution:
- Provide read permission to the SQL Managed Instance.
- MSI must be added as Active Directory admin on the SQL Managed Instance.
- Ensure connectivity between SCOM Managed Instance and SQL Managed Instance networks. For more information, see Create and configure an SQL Managed Instance.
Issue: Not enough cores to create %instance% in the given region
Cause: Occurs when there aren't enough cores to create an instance in the given region.
Resolution: Check the quota section on Azure portal and allocate more cores of type Standard Ds3v2 in the region if needed.
Issue: Secret key with same name is already present in the Key vault
Cause: Occurs when another secret key with the same name is already present in the Key vault.
Resolution: Change the name of the instance.
Issue: VM has reported a failure when processing extension joindomain to join to the domain %DomainName%
Cause: Occurs due to the following reasons:
- Line-of-sight visibility from SCOM Managed Instance Server to Domain Controller.
- Domain User Credentials aren't provided or incorrect.
- OU Path for AD Domain isn't provided.
Resolution: Check the cause and accordingly try to resolve the issue.
Issue: Static IP already in use
Cause: Occurs if the static IP is being used by another instance.
Resolution: Use another static IP.
Issue: Invalid Identity Type %identityType%
Cause: Occurs due to incorrect Managed identity.
Resolution: Provide one of the possible Identity types ((None), (SystemAssigned,UserAssigned)) and try again.
Issue: Private static IP address %LbIpAddr% doesn't belong to the range of subnet %subnet%
Cause: Occurs as the IP address isn't in the subnet range.
Resolution: Provide an available IP from the subnet range and retry the operation.
Issue: Identity isn’t a system admin on SQL Managed Instance: '%instance'.
Cause: Occurs due to the following reasons:
- User Managed Identity isn’t SQL Admin on the SQL MI.
- User Managed Identity is confirmed as SQL Admin on the SQL MI, and this is deployed using ARM, BICEP, Terraform or other deployment solution.
Resolution: Ensure that the User Managed Identity is deployed using the AppId and not the ObjectId. You can confirm if this is applicable by navigating to the SQL MI, Microsoft Entra ID admin pane. Check if the guid that is listed with the User Managed Identity is the ObjectId or AppId of the Service Principal. When this is the ObjectId:
- Set it using the portal
- Redeploy with your preferred solution using the AppId.
Scenario: Deploy Reports on Power BI
Issue: SQL Managed Instance isn't reachable
Cause: Occurs if the public endpoint isn't enabled. Power BI won't be able to reach SQL Managed Instance.
Resolution: Check the user permissions on SQL Managed Instance and provide the required permissions.
Issue: Unable to refresh dataset credentials
Cause: Occurs if the user doesn't have appropriate permissions on the SQL Managed Instance.
Resolution: Check the user permissions on SQL Managed Instance and provide the required permissions.
Issue: Report unable to refresh
Cause: Occurs due to large data size. The report might not refresh.
Resolution: If the Power BI workspace is in pro tier, change it to premium tier or change the capacity of the workspace.
Scenario: Manual Scale up/down
Issue: Internet connectivity test failed. Required endpoints are not reachable from the VNet
Cause: Network issue.
Resolution: Ensure that the SCOM Managed Instance has outbound Internet access and NSG/Firewall is properly configured to allow access to the required endpoints as described in firewall requirements.
Issue: Quota Exceeded
Cause: Occurs if there are no cores available for scaling.
Resolution: Increase the number of cores in the subscription.
Check the quota section on Azure portal and allocate more cores of type Standard Ds3v2 in the region if needed.
Issue: Extension provisioning error
Cause: This error might occur during the provisioning of System Center Operations Manager extension or System Center Operations Manager installation.
Resolution: Check the general troubleshooting, try to identify the issue, and resolve it accordingly.
Issue: Conflict
Cause: Occurs if patching or scaling is in progress. A new operation can't be triggered.
Resolution: Wait for the ongoing process to complete and try again.
Scenario: Patching
Issue: Internet connectivity test failed. Required endpoints are not reachable from the VNet
Cause: Network issue.
Resolution: Ensure that the SCOM Managed Instance has outbound Internet access and NSG/Firewall is properly configured to allow access to the required endpoints as described in firewall requirements.
Issue: Notification is stuck at Fetching updates even though the update operation is complete
Cause: Network issue/development issue.
Resolution: Try refreshing for updates. If not resolved, contact Microsoft support.
Issue: Update state isn't reflected correctly on the card
Cause: Network issue/development issue.
Resolution: Try refreshing for updates. If not resolved, contact Microsoft support.
Issue: Inconsistency in the controls within the card
Cause: Consistency Issue. For example, the update button is enabled even though the title of the card reads SCOM is up to date.
Resolution: Try refreshing. If not resolved, contact Microsoft support.
Issue: Warning message pops up for updates
Cause: Occurs due to any of the following reasons:
- New update is available, and the user hasn't triggered the update instance; or
- Last update failed, and the user hasn't triggered another update instance.
Resolution: Trigger an update instance.
Issue: Update fails after multiple retries
Resolution: To resolve, contact Microsoft support.
Issue: Update fails, and rollback fails to leave an inconsistent state where the number of VMs on the Virtual Machine Scale Sets instance has been modified
Resolution: Go to System Center Operations Manager console and remove inconsistent nodes.
Issue: Update fails but database update is successful
Cause: Occurs due to failed update after the successful database update.
Resolution: Retry after some time.
Issue: After successful update, System Center Operations Manager console isn't functioning properly on the instance
Cause: Occurs if System Center Operations Manager isn't installed properly or some process might be stuck.
Resolution: Try to restart the instance. If the issue persists, contact Microsoft support.
Issue: Update is taking more than 3 hours and fails eventually
Cause: Occurs when the update takes more than 3 hours.
Resolution: Contact Microsoft support.
Issue: Some intermittent issue during update
Cause: Occurs if the service fabric or RP crashes or restarts.
Resolution: Restart the update.
Issue: Scaling and Patching triggered simultaneously and then fails
Cause: Occurs if scaling and patching requests are sent and accepted at the same time.
Resolution: In case you've triggered a scaling operation, wait for the operation to complete before you try to update operation.
Issue: Extension takes more time to update and fails
Cause: Occurs if SQL Managed Instance and SCOM Managed Instance are in different regions due to which the extension takes more time to update and eventually fails.
Resolution: Have SQL Managed Instance and SCOM Managed Instance in the same region.
Issue: After patching, user data in the database is altered or not retained properly
Cause: Occurs if update wasn't done properly.
Resolution: Restart the update.
Issue: Patching request fails
Cause: Occurs due to portal or ARM issue.
Resolution: Wait for some time and retry. If the issue exists even after fixing the portal/ARM issue, contact Microsoft support.
Issue: Patching or scaling operation is already in progress, try again after some time.
Cause: Occurs if a patching or scaling operation is already in progress.
Resolution: Wait for the existing operation to complete and try after some time.
Issue: Stale Management Servers visible on console
Cause: Occurs if a patching or scaling operation has left an inconsistent state after completion.
Resolution: Microsoft Azure Virtual Machine Scale Sets is used to provision the management servers for SCOM Managed Instances. To remove the stale management server from the system, follow these steps:
Access the Azure Virtual Machine Scale Sets and log in to one of the management servers for the SCOM Managed Instance.
Launch PowerShell in administrative mode and navigate to the following directory.
C:\Packages\Plugins\Microsoft.Azure.SCOMMIServer.ScomServerForWindows\<version>\bin\troubleshooterNote
To find the version, go to
C:\Packages\Plugins\Microsoft.Azure.SCOMMIServer.ScomServerForWindowsand review all available versions and then select the latest one.Execute the following script:
.\RemoveStaleManagementServers.ps1The script is interactive and prompts you for the FQDN of the stale server.
Provide the accurate FQDN of the stale management server you wish to remove.
For example, FQDN: SCOMMI2000001.contoso.com.