SAP Knowledge Base Article

2385361 - How to connect Diagnostics Agent to SAP Solution Manager 7.2 system
Component: SV-SMG-DIA-SRV-AGT (Service > SAP Solution Manager > Diagnostics > Infrastructure /
Framework > Agent Framework), Version: 20, Released On: 29.03.2024

Symptom
How to connect Diagnostics Agent to the SAP Solution Manager 7.2 system.
Disclaimer: "Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any
resemblance to real data is purely coincidental."

Environment
SAP Solution Manager 7.2

Cause
This graphic shows how the Diagnostic Agent connects to the SAP Solution Manager:

Resolution

1) Prerequisites:
1.1) Make sure that you have already generated certificate in step transaction code: solman_setup -> Mandatory
Configuration -> Infrastructure Preparation -> Step 'Set UP Connectivity' -> Step 'Diagnostics Agent Authentication'.
Attention: Please ensure all existing important Diagnostics Agents are connected with Solution Manager before creating a
new certificate, otherwise you risk having to reinstall an agent due to a security patch in the following LM-SERVICE
versions:
9.28, 10.21, 11.19, 12.19, 13.10 or 14.11.
If a disconnected agent has a lower version (seen in AgentSupportToolReport.log of DAA) and if Solution Manager Java is
on one of the mentioned LM-SERVICE versions, it will be impossible to connect if you create a new certificate and you must
use a new installer agent version.
More information on the error you will encounter is available here: 3312483 - Diagnostics Agent Connection Error "Root
exception is java.lang.securityException: User 'Guest' is not authorized." - SAP Solution Manager 7.2

1.2) For a newly installed Diagnostics Agent, you need a NetWeaver UME user for initial connection to SAP Solution Manager
NetWeaver Java Application Server.
For details on the User creation refer to the points below:
On the SAP Solution Manager NetWeaver Java Application Server, open the following URL to the Identity Management.
Here, logon as Administrator (with SAP_J2EE_ADMIN role): http://<SAP Solution Manager JAVA FQDN>:
<java_http_port>/useradmin
A) Add Role to group SAP_RCA_AGT_CONN
Note: You can skip this step 'A' if you are on NetWeaver Java <= 7.50 SP 24.
Modify the group SAP_RCA_AGT_CONN
In Assigned Roles tab, add the role NamingOperator
Note: The NamingOperator role is introduced with NetWeaver Java 7.50 SP 25. If this role does not already exist on your system, DO NOT create it
manually.
You must assign the role to the group when updating to NetWeaver Java >= 7.50 SP 25.

Click Save
B) Create User
Choose Create User with Security Policy as Technical User. (Passwords do not expire for technical user)
On the General Information tab within the Details panel, enter values for the following fields:
Logon ID
Define the Initial Password
Last name
 In Assigned Groups Tab, assign the group SAP_RCA_AGT_CONN

Click on Save.

2) Diagnostic Agent Installation:

For a newly installed Diagnostics Agent, you will need to provide FQDN where SAP Solution Manager Java SCS instance is
located, Java SCS Message Server HTTP Port and Credentials with User, Password.
Port in the example is 81XX, where XX is the SAP Solution Manager SCS Instance Number. To test if this port is correct, you
may try the URL below and see if P4 port 5XX04 e.g. 50004 can be seen:

http(s)://<SOLMANSCSHOST>:<MSG_SERVER_HTTP_PORT>/msgserver/text/logon
Provide the details of the user created (via the prerequisites) in the below highlighted fields.
For an existing Diagnostics Agent, you may perform steps below:
1. Logon the Operating System with the Diagnostics Agent admin user <DA SID>ADM e.g. DAAADM.
2. Stop the Diagnostics Agent.
3. Go to the script folder under the agent installation directory e.g.
/usr/sap/<SID_AGT>/SMDA<Instance_Number>/script and run the command.

smdsetup managingconf hostname:"sapms://<solman.full.qual.host.name>" port:"<81xx>"

user:"XXXXXX" pwd:"******"

or for Unix/Linux OS,

./smdsetup.sh managingconf hostname:"sapms://<solman.full.qual.host.name>" port:"<81xx>"

user:"XXXXXX" pwd:"******"

*if only HTTPS port of Java SCS message server is used, then the command is

smdsetup managingconf hostname:"sapms://<solman.full.qual.host.name>" port:"<HTTPS port>"

user:"XXXXXX" pwd:"******" use_ssl:"true"

4. Start the Diagnostics Agent.

5. Check if the Diagnostics Agent is shown as connected in the Agent Administration UI of the SAP Solution Manager
system.
http(s)://<SAP Solution Manager JAVA_FQDN>:<java_http_port>/smd/AgentAdmin
Afterwards, you should be able to see the agent in the tab 'Non-authenticated Agents' in Agent Administration page.
Update the Agent as below.

Then push the certificate to the Agent by clicking on the button "Trust Agents".
 After that, please go to the tab "Connected Agents" and see if the Agent can be seen there.

See Also
1907891 - How to change the server name of Diagnostics Agent
1913837 - How to connect Diagnostics Agent to SLD by using smdsetup script
1907909 - How to connect Diagnostics Agent to Solution Manager system directly by using smdsetup script
3316788 - User credentials required to connect Diagnostics Agents to Solution Manager 7.2
Diagnostics Agent WIKI Page

Keywords
smdsetup, managingconf, agent offline, disconnect; SMDAgent.

Products
Products

SAP Solution Manager 7.2

This document refers to

SAP Component Title
Note/KBA

3312483 SV-SMG-DIA-SRV- Diagnostics Agent Connection Error "Root exception is java.lang.securityException: User 'Guest'
AGT is not authorized." - SAP Solution Manager 7.2

3316788 SV-SMG-DIA-SRV- User credentials required to connect Diagnostics Agents to Solution Manager 7.2
AGT

This document is referenced by

SAP Component Title
Note/KBA
2518113 Smdsetup script error "java.lang.IllegalArgumentException: SAPInst parameter 'hostname' is
empty." - SAP Solution Manager 7.1 and 7.2

2447919 SV-SMG-DIA- Diagnostic Agent does not connect to SAP Solution Manager with the error: 'record with key
SRV-AGT "$internal/mode" is missing.'

2630683 SV-SMG-DIA- How to assign Diagnostics Agent for the system in HEC environment
SRV-AGT

1907909 SV-SMG-DIA- How to connect Diagnostics Agent to Solution Manager system directly by using smdsetup script
SRV-AGT [VIDEO]

3312483 SV-SMG-DIA- Diagnostics Agent Connection Error "Root exception is java.lang.securityException: User 'Guest' is
SRV-AGT not authorized." - SAP Solution Manager 7.2

2355717 SV-SMG-DIA- Introscope Host Adapter activity ended with error '"Introscope Host Adapter configuration finished
WLY-HST without errors, but on Enterprise Manager no Introscope Host Adapter was detected from host" -
SAP Solution Manager 7.2

2913006 SV-SMG-DIA- CCDB Store with error "the parameter AgentHandle is null"
APP-CA

2891328 SV-SMG-DIA- Diagnostics agent does not connect with errors: configuration/runtime.properties (Permission
SRV-AGT denied) or CertificatesKeyStore (Access is denied)

2831493 SV-SMG-DIA- Agent certificate common name does not match the canonical host name
SRV-AGT

2829889 SV-SMG-DIA- Trust Agent does not work: Error During the Certificate Installation
SRV-AGT

2777806 SV-SMG-DIA- Introscope discovery troubleshoot - Guided Answers

WLY

2818988 SV-SMG-DIA- Trust Agent Doesn't Work With Error: Credentials not found, the configuration is empty /
SRV-AGT Authentication Methodtruenot supported - SAP Solution Manager 7.2

2731921 SV-SMG-MON- Troubleshooting for the error "The Agent XXX is not connected" in Metric Troubleshooting of
ALR system monitoring

2616195 SV-SMG-DIA- Diagnostics Agent doesn't connect to the SAP Solution Manager - MalformedURLException
SRV-AGT

2543676 SV-SMG-INS- Error "Make sure that the LMSERVICE.SCA is deployed and that the Solution Manager Diagnostics
AGT (SMD) server is not running under maintenance mode" Whilst Installing Diagnostics Agent - SAP
Solution Manager 7.2

1858920 SV-SMG-DIA- Diagnostics Agent installation with Software Provisioning Manager

SRV-AGT

2253383 SV-SMG-INS- Diagnostics Agent - SWPM Archive-Based Installation

AGT

3316788 SV-SMG-DIA- User credentials required to connect Diagnostics Agents to Solution Manager 7.2
SRV-AGT