Chat now with support
Chat with Support

Foglight Agent Manager 5.9.4 - Foglight Agent Manager Guide

Configuring the embedded Agent Manager Installing external Agent Managers
Understanding how the Agent Manager communicates with the Management Server Deploying the Agent Manager cartridge Downloading the Agent Manager installer Installing the Agent Manager Starting or stopping the Agent Manager process Frequently asked questions
Configuring the Agent Manager Advanced system configuration and troubleshooting
Configuring Windows Management Instrumentation (WMI) Configuring Windows Remote Management (WinRM) UNIX- and Linux-specific configuration
Monitoring the Agent Manager performance Deploying the Agent Manager to large-scale environments

Releasing lockboxes to the Agent Manager

Each lockbox in the Management Server contains a set of credentials and keys for their encryption and decryption. Credentials are released to the Agent Manager unencrypted. When a lockbox is released to the Agent Manager, the Agent Manager passes the credential information to its agents. The agents use this information to establish connection with target resources.

When you start the Agent Manager without having first released a lockbox to it from the Management Server, the following message appears in the startup log:

INFO The Credential Manager has not been assigned any lockboxes. Lockboxes are used to decrypt credentials received as a result of an Agent Credential Query. Without any lockbox assignments, credentials received within a credential query result-set will be discarded. You can grant lockboxes to this Agent Manager through the Credential Administrator on the Server.

The lockbox you release to the Agent Manager must contain the credentials necessary for the agents to access the monitored resources.

 
* 
CAUTION: Any agents that have access to an Agent Manager with a released lockbox can potentially query and obtain credential information stored within that lockbox.
To release a lockbox to the Agent Manager:
1
Log in to the Foglight browser interface.
2
On the navigation panel, click Dashboards > Administration > Credentials > Manage Lockboxes.
3
On the Manage Lockboxes dashboard, in the row containing the lockbox that you want to release, click the Release to Credential Clients icon.
4
In the Release Lockbox to Credential Clients dialog box, type the lockbox password (if one exists) and select one or more credential clients (that is, Agent Managers) for lockbox release.
Figure 2. Release Lockbox to Credential Clients dialog box
 
* 
IMPORTANT: The System lockbox that is included by default with the Management Server is not password-protected. Its contents are accessible to all clients in your system.
5
Click Release.
The Release Lockbox to Credential Clients dialog box closes, indicating success.
6
Optional—ensure the Credential Clients column is populated.
a
Using the breadcrumb trail, return to the main Credentials dashboard, and navigate to the View Clients dashboard.
b
On the View Clients dashboard, ensure that the Show lockboxes currently assigned to each client check box is selected.
 
* 
NOTE: This functionality consumes server resources. It can be significant depending on the size of your client list.
The view refreshes, with the Assigned Lockboxes column populated.
c
Return to the main Credentials dashboard.
d
Navigate to the Manage Lockboxes dashboard.
e
On the Manage Lockboxes dashboard, observe the Credential Clients column of the newly released lockbox entry. The column lists the credential clients to which the lockbox is assigned.

When the lockbox is released to the Agent Manager, any credentials that are later added to the same lockbox are also accessible to the Agent Manager and its monitored agents.

Troubleshooting

This section provides information about problems that you may encounter while running the Agent Manager and describes the solutions available for these problems.

Errors related to Windows WMI and DCOM configuration

If you encounter errors with WMI or DCOM configuration for remote agents, see Configuring Windows Management Instrumentation (WMI) and Configuring Windows Remote Management (WinRM) .

Resolving DATA_COLLECTION_FAILED errors

Resolving DATA_COLLECTION_FAILED errors

Credentials that are used by host agents to monitor remote hosts can have a Use Count policy configured through the Management Server browser interface. In such cases, when the number of collections exceeds the Use Count number, the host agent fails and enters the DATA_COLLECTION_FAILED mode. A Use Count policy violation event is also generated on the Management Server and can be viewed in the Monitor Credential Alarms dashboard.

To restart data collection:
•
Delete the Use Count policy associated with the credential, through the Management Server browser interface (Dashboards > Credentials > Manage Credentials > Edit > Policies). For more information about credential management, see the Foglight Administration and Configuration Guide.
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating