You cannot install the Operations Manager 2007 Cross Platform Agent on a Linux host

Article translations Article translations
Article ID: 978356 - View products that this article applies to.
Warning This workaround may make a computer or a network more vulnerable to attack by malicious users or by malicious software such as viruses. We do not recommend this workaround but are providing this information so that you can implement this workaround at your own discretion. Use this workaround at your own risk.
Expand all | Collapse all

SYMPTOMS

You cannot install the Microsoft System Center Operations Manager 2007 Cross Platform Agent on a Linux host.

When this issue occurs, you receive an error message that resembles the following:
Failed to allocate resource of type random data: not enough good random return code = -1

CAUSE

This issue occurs when there is not enough data to generate a certificate on the Linux host. Typically, this issue occurs on a computer that that is running a Linux operating system that was installed recently.

WORKAROUND

Important This article contains information that shows you how to help lower security settings or how to turn off security features on a computer. You can make these changes to work around a specific problem. Before you make these changes, we recommend that you evaluate the risks that are associated with implementing this workaround in your particular environment. If you implement this workaround, take any appropriate additional steps to help protect the computer.
To work around this issue, use the OpenSSL program to generate random data on the Linux host. To do this, follow these steps on the Linux-based computer:
  1. Verify that the /etc/pam.d/scx file exists. If the /etc/pam.d/scx file does not exist, run the following command:
    cp /etc/pam.d/sshd /etc/pam.d/scx
    Note This command configures the Cross Platform Agent to use the same authentication methods that Secure Shell Daemon (also known as Sshd) uses.
  2. Verify that the etc/opt/microsoft/scx/conf/scxrunas.conf file exists and is configured correctly. If the etc/opt/microsoft/scx/conf/scxrunas.conf file is blank or does not exist, run the following command:
    /opt/microsoft/scx/bin/tools/scxadmin -config-reset RunAs AllowRoot
  3. Run the following command to generate random data on the Linux-based computer:
    Dd if=/dev/urandom of=~/.rnd bs=1 count=1024
    Note The data that is generated by this command is not as secure as kernel-generated data.
  4. Run the following command to create a new certificate by using the data that you generated in step 3:
    /opt/microsoft/scx/bin/tools/scxsslconfig -f -v
  5. Run the following command to restart the Cross Platform Agent:
    Scxadmin -restart

MORE INFORMATION

When this issue occurs during the installation process of the Cross Platform Agent, you may notice one or more of the following symptoms:
  • Authentication does not occur as expected.
  • A certificate file does not exist in the /etc/opt/microsoft/scx/ssl folder that is located on the Linux host.

This issue may also occur when you run the Scxsslconfig program. When this issue occurs for the Scxsslconfig program, you receive an error message that resembles the following:
Setting debugMode=true
Generated hostname: "rhel.contoso.com" (eGethostname)
Generated domainname: "contoso.com" (eEtcResolvConf)
Host Name: rhel
Domain Name: contoso.com
Start Days: -365
End Days: 7300
Cert Length: 2048
Target Path: /etc/opt/microsoft/scx/ssl
Generating certificate with hostname="rhel.contoso.com", domainname="rhel.contoso.com"

[/home/serviceb/TfsCoreWrkSpcLinux_REDHAT_5.0_x86_64/source/code/tools/scx_ssl_config/scxsslcert.cpp:189]
Failed to allocate resource of type random data: not enough good random return code = -1

REFERENCES

For more information about Operations Manager 2007, about Linux-based computers, and about how to use SSL certificates, visit the following Microsoft TechNet Web site:http://technet.microsoft.com/en-us/library/dd891009.aspx

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

Properties

Article ID: 978356 - Last Review: December 28, 2009 - Revision: 1.0
APPLIES TO
  • Microsoft System Center Operations Manager 2007 R2
Keywords: 
kbsurveynew kbtshoot kberrmsg KB978356

Give Feedback

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com