EM13C agent 状态显示不可达

郑全

OEM 13c: Agent status showing unreachable in OEM Console with "Availability Evaluation Error" with no Targets (Doc ID 2937110.1)

In this Document

Symptoms

Cause

Solution

References

APPLIES TO:

Enterprise Manager Base Platform - Version 13.5.0.0.0 and later

Information in this document applies to any platform.

SYMPTOMS

emoms_pbs.log

===========

2023-03-06 13:13:50,160 [MonitoringChecksumCheckMgr:MonitoringChecksumChecker-0] WARN checksum.MonitoringChecksumChecker logp.251 - Sleeping. Duration(msec) 960000

2023-03-06 13:14:17,623 [Job Step 140618970 Job Long-System Pool:JobWorker] ERROR target.EntityUtil logp.251 - PromoteTarget for agent: https :// <agent hostaname.domain name>:3872/emd/main/with changeSequence: 713159 got Exception with Message: unable to connect to http server at https :// <agent hostaname.domain name>:3872/emd/main/. [handshake has no peer] isTransientExceptionThrown: 0

oracle.sysman.emSDK.agent.comm.exception.VerifyConnectionException: unable to connect to http server at <https :// <agent hostaname.domain name>:3872/emd/main/. [handshake has no peer]

CAUSE

communication issue with TLSv 1.0/1.1. Agent can allow only TLSv1.2

emctl secdiag openurl -url https :// <agent host name.domain name>:3872/emd/main/ -ssl_protocol TLSv1.1

Oracle Enterprise Manager Cloud Control 13c Release 5

Copyright (c) 1996, 2021 Oracle Corporation. All rights reserved.

Log file: /tmp/OpenPage_2023_03_17_14_01_414159842175493534942.log

Opening page: https:// <agent host name.domain name>:3872/emd/main/

Using non-validating trust manager; all certificates will be blindly accepted.

Proxy server is not set

Using protocol: TLSv1.1

Negotiated protocol: NONE

Getting the certificate chain

Following exception occurred when running OpenPage

javax.net.ssl.SSLPeerUnverifiedException: peer not authenticated

SOLUTION

Follow below steps

1. Secure oms to restrict with "TLSv1.2" only

<OMS_HOME>/bin>./emctl secure oms -console -protocol "TLSv1.2"

2. Follow below steps on Agent

<AGENT_HOME>/bin/emctl secure agent

<AGENT_HOME>/bin/emctl config agent addinternaltargets

<AGENT_HOME>/bin/emctl config agent listtargets

<AGENT_HOME>/bin/emctl upload agent