Posts Tagged ‘PRO Tips SCOM SCVMM Integration SPN SCP Error 10207’

Setup was not able to retrieve the service account from the specified Virtual Machine Manager Server

March 17, 2011

I was at a customer installing a nice new instance of SCOM 2007 R2 and SCVMM 2008 R2.
Both installed fine.
Then tried to setup the connection between the two, a.k.a. the PRO tips.
After adding all service account sto the needed groups (local admin groups on servrs and admin groups within scvmm/scom) i got to the point of running the SCVMM integration setup on the SCOM server.
This by mounting the SCVMM ISO and running setup, then choosing “Configure Operations Manager”
This setup failed with the following error:

“Setup was not able to retrieve the service account from the specified Virtual Machine Manager Server”
A little googling turned me to this blog post of Aidan Finn.
Which seemed to be exactly the same issue. Only, his solution of running the “ConfigureScpTool.exe -Install” did not work for me.
The tool ran fine. Well, i think it went fine, because it doesn’t provide any feedback about if it succeeded or failed. Hmm.
Checked with ADSIEdit, and still no SCP object was created for the SCVMM Server object.

So i connected to my testenvironment where i also have scvmm and scom running, and opened ADSIedit to find out what the missing SCP records looked like.
I then manually created these in ADSIedit for the new environment, of course with using the proper computernames and settings.
Quick guide:
– open adsiedit, navigate to the computerobject of your scvmm server
– rightclick, create new object
– on object class, select “serviceConnectionPoint”
– on value, type: MSVMM
– then click finish.
Your object is now created, but needs to be adjusted.

The following attributes have to be entered/modified:
– keywords
I had 5 entries here:
* The product-ID of SCVMM, being something like “02024-110-8022126-75063”
* the second entry was the number “1.0”
* the third entry was the SCVMM serviceaccount name, in the format of domainname\serviceaccount for example contoso\sa_scvmm
* the fourth entry was just “Microsoft”
* and the last was the product name, “Microsoft System Center Virtual Machine Manager 2008”
! Note that all 5 entries did not have any quotation marks in them !
– serviceBindingInformation
Enter the TCP Port number that your SCVMM service listens to, typically 8100
– serviceClassName
Enter “MSVMM” here (without the quotes)
– serviceDNSName
Enter the FQDN of your SCVMM server here
– serviceDNSNameType
– Enter “A” here (without the quotes)

And waddayaknow, it worked 🙂
I could now connect from another server using the SCVMM console using the dns name of the scvmm server.
No more kerberos errors and all..