SCOM Management pack for Certificate Monitoring

I have an internal request to not monitor an Intermediate Certification Authorities Certificate Revocation List.

Is it possible to filter this by the issuer or could that postentially impact any certs from that issuer? I am not very adept to certificates.

TIA.

I would like to monitor certificate in this location: localMachine\Microsoft Monitoring Agent.  I have  tried using the following as the store name without succes:

• localMachine\Microsoft Monitoring Agent
• Microsoft Monitoring Agent

Can you advise me what I should use for the store name?

VladimirZelenov Thank you for bringing your concerns to our attention regarding the NumDays and ExpirationStatus properties in the SCOM certificate Management Pack (MP). We are currently discussing this internally to understand the best approach to address the issue.

We will keep you updated on any changes or improvements we decide to implement.

Farooq860 all these properties are frequently changed. Number of days should be designed as performance metric, expiration status as monitor and message as alert. Here Kevin Holman described what is Config churn in SCOM (https://kevinholman.com/2009/10/04/what-is-config-churn/)

VladimirZelenov

To better understand the issue, could you please provide more details on the configuration churn? Specifically, we would like to know why ExpirationStatus, NumDays, and Message should not be part of the properties.

Your clarification will help us address the problem more effectively.

Who did this MP forgot about config churn! ExpirationStatus, NumDays & Message shouldn't be a part of properties 😱

sachin81 

For the query above, in the Certificate MP, the duplicate certificates only get discovered once from the stores selected by user for all the servers and agents managed within the environment where the mp is installed.

Every few hours, the discovery runs and it seems like even the expired certificates removed for one server, it can be there on other managed servers or agents. Could you please verify the same on other managed instances.

pezza72 The list of computer groups are from seal Management Pack (.MP), manually created groups on SCOM console are in the form of xml management pack (.xml) , convert that generated Management pack (.xml) to seal management pack (.mp). and install that seal mp then your custom newly created groups will be listed.

No immediate ETA on new enhancement on certificate mp.

Marek Belan 

1) why there is no client name in alert??

• In the latest version of certificate MP below items already addressed.
  Server Name field added under Store state view
  Server Name and Store Details are shown in all Certificate state views
  Server Name and Store name are showing in Certificate alert context

2) why this alerts open and close automatically? It spams monitoring with same alerts every day!!

possible reason could be related to the discovery of certificates. If a certificate is discovered on any server, an object for that certificate will be created in SCOM. However, there seems to    be no possibility to remove from SCOM a certificate that has been removed from the store of all monitored servers. This could result in alerts being generated for certificates that no longer exist.

MGSaeba 

It is by design due to
multiple Windows computers will usually have many of the same certificates on each computer7. To minimize storage requirements in Operations Manager and avoid redundant alerts, duplicate certificates are only stored once.

geoer 

For your query, we would like to inform you that we are already showing the Server name and Store name in Alert context along with other details about the alert, please refer the snapshot below.

Things seem to have gone quiet on this with no updates about all reported issues.  Is this pack still being maintained and if so, is there any ETA when the pack will be updated?

Thanks

AakashMSFT @Bhavna_Appayya @goyalaayush @shashban

Hi,

We use this MP for monitoring the certificates in our environment. But we have below issue-

1) In SCOM console Monitoring-Microsoft Certificate Monitoring- Certificates-Expired Certificates - this view does not list all the expired certificates. Recently I removed the certificates based on this, however it keeps on discovering new certificates.  

Is this known issue or any solution for this?

Thank You.

Hi i have two questions :

1. why there is no client name in alert??

2. why this alerts open and close automatically? It spams monitoring with  same alerts every day!!