Installing the Microsoft SCOM 2007 agent on Redhat Enterprise Linux

Below is a very summarised process of installing the SCOM agent in Redhat Enterprise Linux.

It assumes you have a working knowledge of both of these products.

it assumes you are using our Vmware template builds and that the install is failing at the certificate signing process.

1.1 CREATE SCOM USER ACCOUNTS
useradd scom_nonpriv
useradd scom_priv
Configure the default shell so the users can login
usermod –s /bin/bash scom_nonpriv
usermod –s /bin/bash scom_priv
Add scom_priv to the wheel group
usermod –G wheel scom_priv
visudo
Locate the line allowing access to the wheel group without a password and remove the # at the start
Save the file and quit

1.2 INSTALL SCOM REQUIRED PATCHES
SCOM requires redhat-lsb to be installed which has a long dependency list
yum install redhat-lsb
Download all required packages
Disable the following daemons
chkconfig cups off
chkconfig avahi-daemon off

1.3 CONFIGURE FIREWALL
vi /etc/sysconfig/iptables
add/append the following line below other permit type statements
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 1270 -j ACCEPT

1.4 INSTALL SCOM CLIENT

Login to the SCOM server with admin privileges
Open the SCOM management console and select the administration panel
Right click on Unix/Linux computers and select discovery wizard
Select Unix and Linux computers and click next
Enter the discovery scope as appropriate using the FQDN for the host
Enter the scom admin account details, untick this is the superuser account, enter the root password and click enable SSH based discovery
Click next
Once the host is discovered and the action set to install agent click select all then click next
The service should install successfully up until the point of signing, once this occurs click done (status should be failed)

1.5 SIGN SCOM CERTIFICATE
From a root prompt on the Linux server
cp /etc/opt/microsoft/scx/ssl/scx-host-.pem /home/admin
chmod 755 scx-host-.pem
Open WinSCP on the SCOM host
Login to the linux host and copy the scx-host-.pem file from /home/admin on the linux host to C:\ on GlobalSCOM
Open a command prompt on the SCOM host
Cd c:\
scxcertconfig -sign scx-host-.pem scx_new.pem
rm scx-host-.pem
move scx_new.pem scx-host-.pem
copy the file back to its original location (/etc/opt/microsoft/ssl/scx-host-.pem)
chmod 444 /etc/opt/microsoft/ssl/scx-host-.pem (if not already)
On the linux server
scxadmin –restart
On the SCOM server rerun the discovery wizard using the same parameters as earlier and the installation should complete successfully
The device should now appear under management
For further details of this process refer to http://scug.be/blogs/scom/archive/2009/12/04/opsmgr-certificate-for-this...