Gateway unable to connect to Management server

Question

Hi,
We are currently having an issue with one of Gateway servers which is not able to connect to RMS server. We had tried re-issuing the Root certificate and the other client certificates as per http://www.definit.co.uk/2012/01/troublewithscom2007r2certificates/ 
But still we have the same issue. PSB the events being triggered on the G/W server.
Log Name:      Operations Manager
Source:        OpsMgr Connector
Date:          6/4/2014 8:21:07 AM
Event ID:      20067
Task Category: None
Level:         Warning
Keywords:      Classic
User:          N/A
Computer:      XXXXXX
Description:
A device at IP RMS IP:5723 attempted to connect but the certificate presented by the device was invalid.  The connection from the device has been rejected.  The failure code on the certificate was 0x800B010A (A certificate chain could not be built
to a trusted root authority.).
Log Name:      Operations Manager
Source:        OpsMgr Connector
Date:          6/4/2014 8:21:07 AM
Event ID:      21002
Task Category: None
Level:         Warning
Keywords:      Classic
User:          N/A
Computer:      XXXXXX
Description:
The OpsMgr Connector could not accept a connection from RMS IP:5723 because mutual authentication failed.
Jesty

Answer 1

Steps to solve issue:
Check for eventids (20067, 20070,  21016)
Export certificate from Local\Computer\Personal\Certificate Folder
Save as DER encoded binary X.509 (.CER) file.
Run certutil -urlfetch -verify <cert.cer> tool on cer file exported in step 2.
Search certutil output for errors, like “retrieving URL: The server name or address could not be resolved 0x80072ee7 (WIN32: 12007)”
Open Internet Explorer and copy URL that cannot be resolved. If you cannot download the *.crt file look at your proxy settings. These should be empty of correct.
Correct proxy settings.
[not sure if step 7 is really needed] Remove certificates from Local\Computer\Personal\Certificate Folder and Local\Computer\Operations Manager\Certificate folder
Import certificate again in Local\Computer\Personal\Certificate folder
You can run certutil -urlfetch -verify <cert.cer> tool again to see if there are still any errors.
Run MomCertImport <nameofcertexport>.pfx again.
Check eventlog for restart of HealthService (will be restarted after running MOMCertImport) and if everything is ok now.
Also refer below link
http://blogs.technet.com/b/stefan_stranger/archive/2009/06/21/the-failure-code-on-the-certificate-was-0x800b010a-a-certificate-chain-could-not-be-built-to-a-trusted-root-authority.aspx
Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question, please click "Mark As Answer"
Mai Ali | My blog: Technical | Twitter:
Mai Ali