The certificate Common Name (CN) does not match when deploying the Operations Manager Linux agent
This article fixes an issue in which you can't deploy the System Center Operations Manager Linux agent to a Red Hat server and receive The certificate Common Name (CN) does not match error.
Original product version: System Center Operations Manager
Original KB number: 2651766
Attempting to deploy the System Center Operations Manager Linux agent to a Red Hat server fails. In this scenario, you receive the error below while discovering and deploying the agent:
The certificate Common Name (CN) does not match. Please resolve the issue, and then run
The server certificate on the destination computer (<Redhat machine name>) has the following errors:
The SSL certificate is signed by an unknown certificate authority.
The SSL certificate contains a common name (CN) that does not match the hostname.
For additional help on this error please go to ...
This can occur for either of the following reasons:
- Certificates may not be valid as the reporting server may have been changed.
- The certificate contains an incorrect host name.
To resolve this issue, complete the following steps:
Remove the existing contents of the agent directory on the server and reinstall the agent RPM.
Generate the certificate, making sure to use the correct host name:
/opt/Microsoft/scx/bin/tools/scssslconfig -f -h <hostname>
Check the status of the certificate:
openssl x509 -noout -in /etc/opt/microsoft/scx/ssl/scx.pem -subject -issuer -dates
Discover the agent from the console and sign the invalid certificate without SSH.