When you start Microsoft Management Reporter 2012 (MR 2012) you receive one of the following error messages: "A connection to the server could not be established. Check the server address and try again or contact your system administrator." or "Can't connect to the Management Reporter server. Do you want to specify a different server address?"
To troubleshoot Management Reporter connection problems you need to click OK
to this message and then click Test Connection
to get an additional error message. You also need to go to Event Viewer to get additional information on the error. In Event Viewer, click Windows Logs
and then click Application.
Under the Source
column look for Management Reporter Report Designer or Management Reporter Services.
Here is a list of errors received when you click Test Connection
and the possible associated error(s) seen in Event Viewer. Find your error in the list and use the appropriate Cause\Resolution sections.
- "Connection attempt failed. There is a version mismatch between the client and the server. Contact your system administrator."
- "Connection attempt failed. User does not have appropriate permissions to connect to the server. Contact your system administrator."
- A connection to the server could not be established. Check the server address and try again or contact your system administrator."
Note Servername is a placeholder for your actual server name and 4712 is a placeholder for the actual port selected during the MR install. If you check the Event Viewer, you may find the following error messages:
Message: System.ServiceModel.Security.SecurityNegotiationException: SOAP security negotiation with 'http://servername:4712/SecurityService.svc' for target 'http://servername:4712/SecurityService.svc' failed. See inner exception for more details. ---> System.ComponentModel.Win32Exception: The Security Support Provider Interface (SSPI) negotiation failed."
- See Cause 3
- See Cause 7
- See Cause 9
- Message: System.ServiceModel.EndpointNotFoundException: There was no endpoint listening at http://servername:4712/InformationService.svc that could accept the message. This is often caused by an incorrect address or SOAP action. See InnerException, if present, for more details. ---> System.Net.WebException: Unable to connect to the remote server ---> System.Net.Sockets.SocketException: A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond
- Message: System.ServiceModel.Security.MessageSecurityException: An unsecured or incorrectly secured fault was received from the other party. See the inner FaultException for the fault code and detail. ---> System.ServiceModel.FaultException: An error occurred when verifying security for the message.
- Message: System.TimeoutException: The request channel timed out attempting to send after 00:00:40. Increase the timeout value passed to the call to Request or increase the SendTimeout value on the Binding. The time allotted to this operation may have been a portion of a longer timeout. ---> System.TimeoutException: The HTTP request to 'http://servername:4712/InformationService.svc' has exceeded the allotted timeout of 00:00:39.9660000. The time allotted to this operation may have been a portion of a longer timeout. ---> System.Net.WebException: The operation has timed out
Message: System.ServiceModel.Security.MessageSecurityException: The security timestamp is invalid because its creation time ('2017-09-15T18:08:07.177Z') is in the future. Current time is '2017-09-1T18:00:34.847Z' and allowed clock skew is '00:05:00'.
Note The date/time indicated above is an example of the actual date/time.
- Message: System.Data.SqlClient.SqlException (0x80131904): A connection was successfully established with the server, but then an error occurred during the pre-login handshake. (provider: SSL Provider, error: 0 - The certificate chain was issued by an authority that is not trusted.)
- Message: System.ServiceModel.Security.SecurityNegotiationException: The caller was not authenticated by the service. ---> System.ServiceModel.FaultException: The request for security token could not be satisfied because authentication failed.
- Message: System.ServiceModel.ProtocolException: The remote server returned an unexpected response: (405) Method Not Allowed. ---> System.Net.WebException: The remote returned an error: (405) Method Not Allowed.
- Message:Microsoft.Dynamics.Performance.Common.ReportingServerNotFoundException: The server could not be found. Make sure the server address is correct.
The Management Reporter Client installed is a different version than the MR Server. See Resolution 1 in the "Resolution" section.Cause 2
The user trying to run MR has not been setup as a user in MR and therefore cannot connect. See Resolution 2 in the "Resolution" section.Cause 3
The computer is not connected to the domain where Management Reporter is installed. See Resolution 3 in the "Resolution" section.Cause 4
The time on the client and server are more than five minutes different (differences in time zones are permitted). See Resolution 4 in the "Resolution" section.Cause 5
The port used during the MR installation is not set up as an exclusion within the Firewall software. See Resolution 5 in the "Resolution section.Cause 6
The Encrypt connection
option was selected during the install but SSL was not configured. See Resolution 6 in the "Resolution" section.Cause 7
The computer is having problems communicating or authenticating with the domain. See Resolution 7 in the "Resolution" section.Cause 8
WCF HTTP Activation is not installed on the MR Server. See Resolution 8 in the "Resolution" section.Cause 9
MR Services are being run as a Domain user and WCF Authentication is failing when using the UPN (User Principal Name). See Resolution 9 in the "Resolution" section.
Check the Management Reporter Client install on the workstation and also check the Management Reporter Server install on the server. To check the version in Management Reporter, click Help
, and then click About Management Reporter
. The MR Client install needs to be the same version as the MR Server install.Resolution 2
Setup the user receiving the connection error within MR.
- Run MR as a user that is setup as an MR administrator.
- In MR click Go and then click Security.
- Add the user who is receiving the connection error.
If it is not known what user(s) exist in MR you can run 'select * from SecurityUser' against the ManagementReporter database to find out. Resolution 3
Management Reporter will only function while connected to the domain used during the install. Even if all MR server components are on one computer, that computer still needs to be connected to the domain you were using when you installed MR.Note
This means that Management Reporter will not work when demonstration laptops are not physically connected to the domain or not connected using a VPN connection. Resolution 4
Verify the time on the client and server. Change the time that is incorrect. The time must be within five minutes of each other.Resolution 5
Setup an exception in your Firewall program. Steps will vary depending on the Firewall program used but here are high level steps.
- Click Start and then click Run. Type WF.MSC and then press Enter.
- Click Inbound Rules.
- Click New Rule.
- Click Port and then click Next.
- Click Specific local ports and then type 4712. If you are not using the default port of 4712, you will need to type that here. Click Next.
- Click Allow the connection and then click Next.
- Select Domain, Private, and Public. Click Next.
- Type Management Reporter as the Name and then click Finish.
The MR Install Guide has the following information regarding the encrypt connection option:
You must configure SSL on the server and install certificates before you can use this option. For more information about encryption in Microsoft SQL Server, see the SQL Server documentation on MSDN (http://msdn.microsoft.com/en-us/library/ms189067.aspx
You could also modify the config files to turn Encryption off (make a backup copy of the files before you modify them).
- In Windows Explorer, go to the MR install folder (the default install is: C:\Program Files\Microsoft Dynamics ERP\Management Reporter\2.1)
- In the Application Service folder find the web.config file and right-click the file to open it in Notepad.
- Locate the <connectionstrings> and change the setting Encrypt= from True to False.
- Save the changes.
- In the Process Service folder find the MRProcessService.exe.config file and right-click the file to open it in Notepad.
- Locate the <connectionstrings> and change the setting Encrypt= from True to False.
- Save the changes.
Remove the computer from the domain and then add it back to the domain. Warning
A local administrator account will need to be used to logon to the computer one time after it is removed from the domain.
- Click Start, click Run and type: sysdm.cpl to open System Properties.
- Click Change and make a note of the Domain name.
- Click Workgroup, type a name (i.e. workgroup), click OK to accept changes and then restart the computer.
- After restarting, click Start, click Run and type: sysdm.cpl to open System Properties.
- Click Change and then click Domain.
- Enter the domain noted above, click OK to accept changes and then restart the computer.
Install WCF HTTP Activation.
- In Windows Server 2008, open Server Manager and then click Features.
- Click Add Features and then expand .NET Framework.
- Expand WCF Activation and then mark HTTP Activation.
- Click Next and then click Install.
Create an SPN on the computer for the domain account running the MR Service. To create an SPN for this domain account, run the Setspn tool at a command prompt on the MR server with the following commands:
setspn -S HTTP/MRservername domain\customAccountName
setspn -S HTTP/MRservername.fullyqualifieddomainname domain\customAccountName Note
- "MRservername" should be replaced with the MR server name where the MR Application Service is installed.
- "MRservername.FullyQualifiedDomainName" should be replaced with the fully qualified domain name of the MR server where the MR Application Service is installed.
- "domain\customAccountName" should be replaced with the domain account running the MR Services.
If you still receive error messages after making changes contact Microsoft Management Reporter support with the errors including details from Event Viewer.
for other considerations.
Article ID: 2862020 - Last Review: September 11, 2013 - Revision: 1.1
- Microsoft Management Reporter 2012
- Microsoft Dynamics AX 2012
- Microsoft Dynamics GP 2010
- Microsoft Dynamics GP 2013
- Microsoft Dynamics SL 2011
|kbmbsmigrate kbsurveynew KB2862020|