Won't show unbinded tunnels and won't load certificates on Client

[kalla]

Hey guys, so im currently in school doing a project where we are supposed to monitor our network and we're trying to do this with NetXMS but we won't be able to establish a Agent tunnel, were always getting the "TLS context" Error and our Agent log says it can't find such File when looking for the certificate. It won't even show any unbind tunnels etc when starting the agent. Im kinda desperate right now, because we tried every possible thing explained on this forum and we can only work on this project in school time as our server is still in school. But i'll make sure that i'll upload the log files tomorrow.

Thanks in advance and hopefully we can get this software to work!!
deadline is 13/12/2021

[kalla]

Here is my Agent log:

2021.11.23 09:05:00.540 *D* [comm.cs.1          ] Received message CMD_GET_PARAMETER (92)
2021.11.23 09:05:00.540 *D* [comm.cs.1          ] Requesting metric "Agent.ThreadPool.AverageWaitTime(PING)"
2021.11.23 09:05:00.540 *D* [comm.cs.1          ] GetParameterValue("Agent.ThreadPool.AverageWaitTime(PING)"): 0 (SUCCESS) value = "0"
2021.11.23 09:05:00.540 *D* [comm.cs.1          ] Sending message CMD_REQUEST_COMPLETED (ID 92; size 48; uncompressed)
2021.11.23 09:05:03.133 *D* [tunnel            ] 172.30.16.254: Cannot establish connection (0 Der Vorgang wurde erfolgreich beendet.)
2021.11.23 09:05:03.134 *D* [tunnel            ] 172.30.16.1: Loading certificate from file
2021.11.23 09:05:03.134 *D* [tunnel            ] 172.30.16.1: Cannot open file "C:\WINDOWS\system32\config\systemprofile\AppData\Local\nxagentd\certificates\91D9FE4CEFC23FFD78E258419FD742C8DC00207C.crt" (No such file or directory)
2021.11.23 09:05:03.134 *D* [tunnel            ] 172.30.16.1: Cannot open file "C:\WINDOWS\system32\config\systemprofile\AppData\Local\nxagentd\certificates\060201101EAC000000000000000000000000.crt" (No such file or directory)
2021.11.23 09:05:03.135 *D* [tunnel            ] 172.30.16.1: TLS handshake failed (error:00000005:lib(0):func(0):DH lib)

[kalla]

And here my Management Console

---

[victor]

Hi,

are you sure agent can connect to the server on port 4703? Also, did you set up server certificate? Without server certificate TLS session cannot be established.

Best regards,
Victor

[kalla]

Yes, I have set up the required certificates and opened connections for port 4703... still no success

[Filipp Sudanov]

If you open server log at debug level 6, do you see anything there when agent is trying to connect?