-
-
Re: Unable to Start Solarwinds Agent
Hi!
I have the same issue, has submitted a support case to Solarwinds #965051
-
Re: Unable to Start Solarwinds Agent
Yeah, I think I'm gonna have to open a case too, can't get it figured out. If you can, please comment back here as to what your solution was as it may be helpful to me or others in the future. I'll do the same. Thank you!
-
-
Re: Unable to Start Solarwinds Agent
The error message "The client certificate does not contain a valid UPN" may be caused by an invalid Solarwinds Agent certificate on the node.
These steps may help to resolve this issue:
Uninstall the Solarwinds Agent
Remove the Solarwinds Agent certificates
Re-install the Solarwinds Agent
Attached is a word doc that shows how to remove the certificates.
-
Re: Unable to Start Solarwinds Agent
I appreciate your response but those instructions are incorrect. When you uninstall the SolarWinds agent software this removes the "SolarWinds Agent" entry from the Certificates snap-in, so there is no way nor need to delete them manually. I've uninstalled and reinstalled the SolarWinds Agent software several times on this machine to no avail. It just keeps giving me the same error. I'm not having any trouble on any other machine, just this one....
-
Re: Unable to Start Solarwinds Agent
Same for me, I will return when I have got an answer from the support ticket.
-
-
-
Re: Unable to Start Solarwinds Agent
Hi!
I have solved the problem! The problem for me was the machine key and permission to this one. Go in under "C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys" properties > Security, here you should have the permission that says in the article "https://support.microsoft.com/en-us/kb/278381" you don't need to care that this article is for windows server 2003...
When you have change this, go in to the certificate store and delete the certificates under the Solarwinds Agent folder. After this go in to the control panel > Orion Agent Settings and press OK, then your certificates will be recreated and the right permission will be set on the machine key.
One warning is that i don't know how this could effect other applications on the server.
Good luck!
-
Re: Unable to Start Solarwinds Agent
fredrikolausson, can you clarify what you mean by "go in to the control panel > Orion Agent Settings and press OK"? Are you talking about on the target server or on the orion server? I don't see where there are any "orion agent settings" in the control panel?
-
Re: Unable to Start Solarwinds Agent
ryan.davis26 I mean on the target server, under Orion Agent Settings you tell the agent if it is passive or active communication, When you press OK here you will reconfigure the agent and it will recreate the certificates that is needed and a new machine key will be created with the right permissions.
-
-
Re: Unable to Start Solarwinds Agent
I have talked with some colleagues to me and asked them about the permissions on the "C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys" folder and our conclusion is that it can be more user rights on this folder BUT no user should inhert by default the permissions down to files and folders under the MachineKeys folder!
-
Re: Unable to Start Solarwinds Agent
1 of 1 people found this helpfulThis is the soution that worked for us. As fredrikalausson stated it is a permissions problem on the folder that prevents the certs from being created.
The permissions on the "C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys" folder needed to changed because the agent install did not create the certifcates.
Here is a link to a Solarwinds article that gives some information on this:
-
-
-
Re: Unable to Start Solarwinds Agent
By default the agent runs under the system context when you install the agent manually or deployed from orion. What I found is if you want to change this behavior and run the agent as a different user you'll need to use a user in the local administrators group. This will let you start the service without any problems.