Unable to login to BMC Client Management (BCM) console after installing the standard installation package and getting an error:
"Connection failed: the host is either unreachable on the given port or there is a wrong SSL configuration"

Before you continue with the steps outlined below, ensure login to  Webstart console works without encountering any issues.

This issue requires the certificates to be applied/ installed manually on the console installation directory.

1. Verify the auth and trusted certificate being used in your BCM environment

   • This can be verified from mtxagent.ini of the master server under [Security] section.

     • Browse to the master installation ..\Program Files\BMC Software\Client Management\Master\Config\

     • Open mtxagent.ini and go to [Security] section

     • Verify the values of certAuth= and certTrusted=

   • Another way of verifying this is using the BCM Console in case the webstart console is working on any of your devices.

     • Login to BCM console using webstart console

     • Select the Master/Relay server under Device Topology >> Agent configuration >> Security

     • Check the value for Authority Certificate and Trusted Certificate

     • It will be either bcm or amp or your own certificate authority based on the configuration

2. Apply/ Install the certificates on console installation directory

   • Browse to C:\Program Files\BMC Software\Client Management\Console

   • Create certs directory followed by a subfolders auth and trusted under certs. So,the directory should be C:\Program Files\BMC Software\Client Management\Console\certs\auth and C:\Program Files\BMC Software\Client Management\Console\certs\trusted

   • Browse to master or relay at ..\Program Files\BMC Software\Client Management\Master Or Client\bin\certs\auth\{GUID}\ and copy the .crt, .key, .kep to C:\Program Files\BMC Software\Client Management\Console\certs\auth\.

   • Copy trusted certificate from ..\Program Files\BMC Software\Client Management\Master Or Client\bin\certs\trusted\{GUID}\ to C:\Program Files\BMC Software\Client Management\Console\certs\trusted\

• Launch the console again with the shortcut created on Desktop and you'll be able to login without the SSL error.

• The same needs to be done when it comes to MAC or Linux. Refer to below community article for the directory path.

https://communities.bmc.com/docs/DOC-115435

From 12.9 onward, the required certificate can be downloaded from the console webpage and installed in the console directory.

• Download the certificate from console webpage (https://<MasterServerHostName or IP>:1611/console)

• Browse to the console installation directory (..\Program Files\BMC Software\Client Management\Console\) and create a new folder named 'certs' and a subdirectory named 'trusted'

• Copy the downloaded certificate to ..\Program Files\BMC Software\Client Management\Console\certs\trusted\

• Re-launch the console using the shortcut created on desktop and the login will work successfully.