Bypass certificate errors in web transaction monitoring

Hello,
I have a portal that has a certificate issue which is creating alerts.
I am getting error code 2147954575 ERROR_WINHTTP_SECURE_FAILURE
Is there a way to bypass this? When I record session, the browser takes me to the login page without any errors. This is failing only when I run the test from within SCOM.
Thanks!

Hi ardnivar,
Please look at this post:
https://social.technet.microsoft.com/Forums/systemcenter/en-US/48bafad7-811f-4f3c-b0d9-0031cd486d75/how-do-i-ignore-ssl-errors-in-web-application-availability-monitoring?forum=scomapm
Natalya
### If my post helped you, please take a moment to Vote as Helpful and\or Mark as an Answer

Similar Messages

SCOM 2012 SP1 Web Transaction Monitoring with Login test.

Hi,
we setup a web transaction monitor test and did the full recording. The web site is one that accepts an active directory account for login. We also setup a runas account that is a valid account for the site and configured NTLM in the settings
for authetication and set this runas account.
The test does not fail.    However when we change the runas account password to force a failure, we dont get a failure on the website login test but instead a runas account verfication failure from SCOM.
How can we configure the web transaction monitor to properly login during the test?   Any guidance would be appreciated.
Thanks Lance

So back to the original topic of the thread.
We setup another test on a site that uses basic authentication. We setup the web transaction test to use a login on a initial site that transfers to a second site. We recorded this entire test and saved. It seems to work as it gives
no errors.
However when we change the Runas account's credentials, which means it CANT login to the site, it still runs fine with no errors.
This tells me it is not really logging in but just seeing the http status code is less than 400.
What am I doing wrong.
Thanks Lance

SCOM2012 Web Transaction Monitor - Displaying the Request Status

I have successfully created a 'Web Application Transaction Monitor' using the SCOM 2012 R2 Console wizard. The monitor goes through several listed website URLs and completes.
What I'm interested in is how to display the 'Request' status objects. I use the MS-Visio plug-in to display various dashboards within Sharepoint and I would like to display the part of the Web Transaction which is showing an error.
I can see the individual requests under the Availability of the created 'Web Application Transaction Monitor'. I just need to capture those objects for displaying within a view or MS-Visio diagrams.
The email notifications show which of the URLs are having the issue, but I do not seem to find a view or object I can display.
Any ideas on what could be done would be appreciated. I was hoping NOT to create individual Web Txn Monitors for each URL, but that maybe the only solution.

When I create a Dashboard View and add the Alert Widget, I can get the URL from Name Column.
Juke Chou
TechNet Community Support

Using web transaction monitor to record dynamic java sessions.

Hello,
The title may be a bit confusing please forgive me for that :)
I am recording a login-logout session for a business objects portal.
Post login, the web application (as most do) generates unique tokens for each login session and uses that token for subsequent links for that single session.
The problem: SCOM, records the links that were generated during the recording session. Which generates lets say token
abcd. In subsequent iterations of the monitor, the web application will generate different tokens for each logon attempt but SCOM continues to use the links that were generated using the token
abcd. This causes false alerts as the token being used by SCOM is not dynamic!
This is going to be a serious hurdle for us as we have several similar applications and I need to find a work around or solution to this.
Have anybody come across this till now? Any suggestions will be of great help..
Thank you for your time.

Thanks! Exactly what I needed.
I hit a hurdle with that too because the portal I'm trying to monitor is passing the session variable using GET and not POST. We can insert parameters only into POST requests.
I will keep exploring and will post here if I find an answer. Meanwhile, if anybody has experienced this, would appreciate any inputs on how we can insert parameters into GET links directly.

Web Application Transaction Monitoring Alerts with "wrong" Path

Hello,
i have created some web transaction monitors, such as
http://foo.htm who is hosted on the server foo123.cologne.org.
It works.. but
we have also a mssql monitoring, the discovery of the mssql management pack discovers the reporting part of mssql server on our managementserver Operations12.cologne.org. So (it's right..) the server Operations12.cologne.org is a member of the SQL Instances;SQL
Compontents;SQL Computers group.
When the web transaction monitor generates an alert, it have the pathname Operations12.cologne.org and not the pathname of the "right" server foo123.cologne.org.
For our mssql admins i have build an email-notification, when somethings going wrong at our sql servers (member of the SQL Instances;SQL Compontents;SQL Computers group) they received a mail.
The problem is, that they received a mail, when a web transaction monitor generated one, because the pathname is the name of our management server, because the management server is a member of thos sql server groups.
Someone have an idea to fix my "problem"?
- Best way: changing the path names of the web transaction monitorings... but how? i can't find anything to change..
Kind regards
Wolfgang Winter

Thank you, it's a help to decide, what to do, so i have to solutions:
- installing an agent to the web-appliction-hosting-server and configure it as a watcher node
(may be i will have problems with our firewall admins, because they have to allow the communications and.. when the hosting watcher is down, i have no alerts.. when i use more than one watcher nodes (good).. i have the wrong path names..
- configure a part of our management server group without SQL-Reporter Component as a watcher node
(more easy, because i have to tell my firewall admins: "the server foo456 is the standard watcher node"
Crazy.. because i don't know, how to assign the web transaction monitors to the "causing" server.., for mail notification and for our integration to HP Service Desk...

Have Web App/Transaction monitoring alert only when majority of watcher nodes are in error?

We do a lot of web app/transaction monitoring and we have watcher nodes distributed globally. When we have connectivity issues at a site hosting a watcher node, the web monitors that target the watcher node in that site all alert even though all the other
watcher nodes are fine.
We'd like to reduce the noise from our web monitoring by having alerts fire only when a majority, or some other defined ratio, of watcher nodes are in an error condition. Is this possible, and if so, how?
For reference, we're running 2012 R2 and monitor hundreds of URLs. This list of URLs and watcher nodes is fairly dynamic, so we'd prefer to find a solution that doesn't require manual development (e.g. creating distributed apps), however if that's the only
path then it would also be good to know.

First, disable the alerts from the web application that you have created.
Next, create a new distributed application. Use the 'Blank (Advanced)' template. When it comes to choosing the management pack, set it to be the same as the one used for the web monitor.
Once the distributed application designer has loaded, client the 'Add Component' button.
Give it a name - Something like 'Appname web monitor component group'
Choose the 'objects of the following type(s)' radio button. Navigate the tree:
Entity -> Logical Entity -> Perspective -> Web Application Perspective -> YOURWEBMONITOR
Tick the box next to the name of your web monitor.
Now, on the left, in the Objects bar, you should see the watcher nodes for your web application. Add ALL the watcher nodes into the component group by dragging them in.
Now save your distributed application.
Click the title of the component group that you have just created, down the bottom right of the window there will be a link called 'Configure Health Rollup'. Click that.
In the override properties window, Tick the box next to the 'Rollup Algorithm' and change the Override Value to Worst state of a percentage of members in good health state' and override 'percentage' value into your expected value.
OK the changes and then save the distributed application once again.
Before you exit the designer, note the name of the component group that you created.
Finally, we have to enable alerting for that component group. To do this, exit the designer and you should be back in the Authoring pane of the console.
Go to "Management Pack Objects\Monitors" in the console. Click on the Scope toolbar button to scope the view -
if a scope was previously active, this will disable the scoped view, so click the button again. You should be presented with a "Scope Management Pack Objects Window"
Click the "Clear All" button at the bottom of that window, then type in the
name of the component group that you noted down earlier into the search box. A single line should be displayed in the search results. Tick the box and click OK.
There should now be a yellow bar saying that the view has been scoped to your web application component group. Underneath will be a tree view of the monitors in your web applicaion.
Expand the tree view until you find a monitor called "Component Group Health Roll-up for type..."
Open the properties of that item, go to the alerting tab and
enable the "generate alerts for this monitor" checkbox.
You can then fill in the alert name and description as well as other things like severity and whether or not the alert will close when the monitor is healthy.
Roger

Remove Web-Passthrough certificate error bypass

I'm almost positive I read somewhere on the board that there was a way tp prevent the certificate error from appearing on a Web-Passthrough portal page WITHOUT installing a certificate. Will someone please post a link?

you can disable secure webauth
Cisco Controller) >config network web-auth secureweb enable/disable
Enable - Enables https for web-auth redirection.
Disable - Enables http for web-auth redirection.
HTH,
Steve
Please remember to rate useful posts, and mark questions as answered

I am getting a Invalid Server Certificate error when I go to secure web sites.

I am getting an Invalid Server Certificate error in Safari when I go to https web sites. I am running Snow Leopard 10.6.8. My time and date are correct on my computer. I have no problem accessing non-https web sites.
Any suggestions on why this is happening are appreciated.

Launch the Activity Monitor application by entering the first few letters of its name into a Spotlight search. Select “All Processes” from the popup menu in the toolbar, if not already selected. Enter "ocspd" (without the quotes) in the "Filter" text field. Does a process with that name appear in the table below?
If not, see this thread:
ocspd crashing after 10.6.8 update on...: Apple Support Communities

SCOM 2012 R2 - How to create a Web Application Monitor for an URL requiring certificate authentication

Hi All,
It looks like in SCOM 2012 there are two ways to monitor a web application (URL monitoring):
Way no 1: (Using the Web Application Transaction Monitoring template)
Way no 2: (Using the Web
Application Availability Monitoring template)
We have created some monitors using
Web Application Availability Monitoring to check if URL is up without any authentication method.
However, we have few URLs for which we need Client Certificates to be used for accessing them but found no option in SCOM 2012 to configured the certificates.
I have searched a lot on the Tech Net library but no clue. Does anyone know how to successfully monitor an URL requiring certificate authentication on SCOM 2012 ? or, at least, using no matter which method?
Thanks.
Regards,
Raju.

Hi,
Based on my research, it is not possible by using the built-in monitoring templates. Both of them handles “normal”, server-side, SSL-certs, and the transaction monitor handles basic/digest/NTLM authentication, but client certificate based authentication
is not a configurable option.
Regards,
Yan Li
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

How do I remove the certificat error everytime I try to access the Cisco Unified CM Administration web-page?

Hi,
Every time I want to have access to the Cisco Unified CM Console (System version: 7.0.1.11000-2), I use the https://10.10.x.x/ccmadmin/showHome.do homepage on my client computer, but when I open the page, I get a SSL certificate error, stating no trust to this webpage security certificate and if I those "continue to this page (not recommended)", I get access to the Cisco Unified CM Console web page.
I have tried to add the https://IP-adress to secure web pages in Internet Explorer 7, but this to no avail, it does not help.
How do I add this certificate to a trusted something, so I do not get this warning every time I open the page?
Kind regards,
Carl-Marius

Hi Michael,
It worked when I change the IP-address to the name that was written in the certificate, and imported the certificate to Internet Explorer.
Thank you for your fast and very precise help!
Kind regards,
Carl-Marius

Office Web Apps deploy certificate error

IIS Using Domain Certificate, when access "https://fqdn/hosting/discovery" with certificate error.
Office web apps using same CA with Front End Server.
new web farm with this new certificate name.
Any suggest?
Thanks.

When you get the certificate are you able to view the certificate details? Do they match the name of the site?
Do you have the appropriate root certificate installed on the client that you are browsing from?
If this helped you please click "Vote As Helpful" if it answered your question please click "Mark As Answer"
Georg Thomas | Lync MVP
Blog www.lynced.com.au | Twitter
@georgathomas
Lync Edge Port Check (Beta)
This forum post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

Certificate error while connecting to multiple web service

I am having a web service test client through which I can connects and get reports from multiple web services.
In Development unix box, we are using "self-signed certificate" using keystore type JKS. In Production server, we are using certificate from CA.
The web service is running in Development and in Production.
Now I have developed single test client with a drop down selection for different web services. For example, if we select "Development", the request will go the development web service and if we select "Production", the request will go to Production web service.
Now while connecting to Develpment service, we are settings the below certificates details Because we are using the self signed certificate.
System.setProperty("javax.net.ssl.keyStore",keyStoreFileLocation);
System.setProperty("javax.net.ssl.keyStorePassword",keyStorePassword);
System.setProperty("javax.net.ssl.keyStoreType", keyStoreType);
System.setProperty("javax.net.ssl.trustStoreType",trustStoreType);
System.setProperty("javax.net.ssl.trustStore",trustStoreFileLocation);
System.setProperty("javax.net.ssl.trustStorePassword",trustStorePassword);
I am clearing the System properties using the System.clearProperty() while pointing to Production service. because in Production we are using the CA certificate from Thawte so these details are not required at all and our JRE (java 5) is pre configured to support that CA certificate.
I am using Resin-2.1.12, axis1.2 and java5.
Now the problem is
(1) for the first time, when I send the request to Production Service URL, the report gets generated. For the next time when we are running against Development, it's giving below certificate error.
sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
(2) Now restart resin and run the test client against Developemnt service URL, here report gets generated and for the next time, run the test client against Production, it's giving the certificate error.
So for the 2nd request, it always gives the error irrespective of the web service instance selected.
Please suggest ....thanks in advance.

Hi ,
No, due to the issue is happening only on one computer.
The error "(401) Unauthorized" usually indicates that the connection has been established but the permission check fails. InfoPath Form Services uses the application pool identity of the web
application to connect to resources.
Does the account which login the computer have permission to connect to User Profile Service Application?
For a workaround, you can go to IIS Manager , set the User Profile Application Pool to Anonymous Access and try again.
Also you can have a look at the blog:
http://sharepointconnoisseur.blogspot.in/2011/04/how-to-resolve-401-unauthorized-error.html
Best Regards,
Eric
Eric Tao
TechNet Community Support

Error calling BLS Transaction as Web service

Hi,
I am trying to call BLS tranx as Webservice from another BLS Tranx.
I craeted the simple BLS with no input parameter and set only one output parameter.
Then i created the WSDL as
http://<server:port>/XMII/WSDLGen/<Transaction path>.
In new BLS tranx, i created the Web Service action block and gave this WSDL URL (http://<server:port>/XMII/WSDLGen/<Transaction path>).
I gave username and password and selected the port(XacuteWSSoap) and then operation( xacute).
In Links, I gave the Loginname and Password.
But while executing, it showed the error as
Error Invoking Web Service Action: Status (401): Unauthorized
My username and Loginname and passwords are correct only.
What is the problem and how to solve it.
Regards,
Senthil

Hi,
Which SAP MII version you are using?
I have tested one piece in MII 12.0.9 it works for me following are steps which i followed.
After WSDL generation
1. in Web service action block --> cofigure i am passing following parameters
WSDL base URL: http://<server:port>/XMII/WSDLGen/<transaction Path>
User Name: XXX
Password: XXX
2. in Web service action block --> Links I am passing following parameters
WSDLUrl : http://<server:port>/XMII/WSDLGen/<transaction Path>
Web_Service_0.XacuteRequest{/ns1:XacuteRequest/ns1:LoginName} : XXX
Web_Service_0.XacuteRequest{/ns1:XacuteRequest/ns1:LoginPassword} : XXX
Refer below SDN thread may be helpfull:
[Web Service Action Block;
Hope it helps!!
Regards,
Manoj Bilthare

Error in TM8: "Link to the EM web transaction could not be determined"

Hi,
I' working on SAP TM8 - EM integration. I set up all the configuration steps and the app objects/events are correctly sent to EM.
I have a problem with link from Fowarding order in TM and Web Transaction in EM: in TM SPRO you can set for the fw order type an EM web transaction started from TM.
The field is named: EM_WIT and I inserted the name of the standard web transaction configured in EM "ODT20_CONS_FO" but we always have this error message.
Do you have some ideas?
Thank you.
Regards
Leonardo

Hi,
I found the solution. It was an error in SAP standard content in EM.
Leonardo

Not able to record web navigation(URL/Certificate Error : Navigation Blocked) part of oracle application in open script !

Hi,
I am trying to record script in using Functional Oracle EBS/Form in open script but only Oracle Forms actions are got captured.
I am not able to record first web navigation(URL/Certificate Error : Navigation Blocked) part, only i am getting "web.window(7, "/web:window[@index='0' or @title='about:blank']"). close()" code for navigation of URL part.
I tried with changing Capture Screen in Recorder but doesn't work.
How to resolve this.
Please help me out.
Here is some info :
OATS version : Version: 12.3.0.1 Build 376
Browser : Internet Explorer 9
Operating System : Windows 7
I am using VPN connection to open oracle application.

try adding ur url in secured site list

Bypass certificate errors in web transaction monitoring

Similar Messages

Maybe you are looking for