Client Management - Installing certificate for standard console installation package - INCLUDES VIDEO
Knowledge Article
Client Management - Installing certificate for standard console installation package - INCLUDES VIDEO
Using a standard installation package/ MSI package to use heavy console requires applying the certificates manually. This is a prerequisite.
It is preferred using the web start console to avoid installing the certificates manually.
BMC Client Management
BMC Client Management
All versions of BCM
Unable to login to BMC Client Management (BCM) console after installing the standard installation package and getting an error: "Connection failed: the host is either unreachable on the given port or there is a wrong SSL configuration"
Missing certificates
Before you continue with the steps outlined below, ensure login to Webstart console works without encountering any issues.
This issue requires the certificates to be applied/ installed manually on the console installation directory.
Verify the auth and trusted certificate being used in your BCM environment
This can be verified from mtxagent.ini of the master server under [Security] section.
Browse to the master installation ..\Program Files\BMC Software\Client Management\Master\Config\
Open mtxagent.ini and go to [Security] section
Verify the values of certAuth= and certTrusted=
Another way of verifying this is using the BCM Console in case the webstart console is working on any of your devices.
Login to BCM console using webstart console
Select the Master/Relay server under Device Topology >> Agent configuration >> Security
Check the value for Authority Certificate and Trusted Certificate
It will be either bcm or amp or your own certificate authority based on the configuration
Apply/ Install the certificates on console installation directory
Browse to C:\Program Files\BMC Software\Client Management\Console
Create certs directory followed by a subfolders auth and trusted under certs. So,the directory should be C:\Program Files\BMC Software\Client Management\Console\certs\auth and C:\Program Files\BMC Software\Client Management\Console\certs\trusted
Browse to master or relay at ..\Program Files\BMC Software\Client Management\Master Or Client\bin\certs\auth\{GUID}\ and copy the .crt, .key, .kep to C:\Program Files\BMC Software\Client Management\Console\certs\auth\.
Copy trusted certificate from ..\Program Files\BMC Software\Client Management\Master Or Client\bin\certs\trusted\{GUID}\ to C:\Program Files\BMC Software\Client Management\Console\certs\trusted\
Launch the console again with the shortcut created on Desktop and you'll be able to login without the SSL error.
The same needs to be done when it comes to MAC or Linux. Refer to below community article for the directory path.
https://communities.bmc.com/docs/DOC-115435
From 12.9 onward, the required certificate can be downloaded from the console webpage and installed in the console directory.
Download the certificate from console webpage (https://<MasterServerHostName or IP>:1611/console)
Browse to the console installation directory (..\Program Files\BMC Software\Client Management\Console\) and create a new folder named 'certs' and a subdirectory named 'trusted'
Copy the downloaded certificate to ..\Program Files\BMC Software\Client Management\Console\certs\trusted\
Re-launch the console using the shortcut created on desktop and the login will work successfully.