Advanced App Availability Monitoring webinar question

I keep getting TLS failures on certain websites and it seems as if I need to do an override to use the override web test script on github. I’m not following Matthew in this video though at 12:23 on what I need to do in order to use the script.

The new script adds this at the top.

[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12

https://www.youtube.com/watch?v=bIHO4tb_5c4&t=1395s

Do I just add that line in the override block in SCOM for the monitor? Then if so how do I not use that line or use it going forward for certain other url tests. I’m so confused.

Thanks.

G

Got it. Support helped me here…

If anyone runs into needing to know exactly how to override a script:

 

Determine the EA ID:

  1. Open Operations Manager Shell
  2. Run the commands below, replacing “KH Test EA” with the name of your Enterprise Application:
$class = get-scomclass | where {$_.DisplayName -like "Enterprise Application (v1)*"}
$app = get-scomclassinstance -Class $class | where {$_.DisplayName -eq "KH Test EA"}
  1. Make sure only one result is returned by running the command below. If there is more or less than one result then please stop here and let me know:
$app.count
  1. Get the ID of this EA, checking the name of the result matches your EA name:
$app | select DisplayName, Fullname, Id

Example from my environment:

Run the Override-WebTests Script:

  1. Copy the attached PowerShell scripts to a folder, and rename them back to .ps1

  2. In the Operations Manager Shell, run the .\Override-WebTests.ps1 script. In the parameter prompts, enter the path to the WebTest_TLS12.ps1 script and then the EA ID you obtained in previous steps e.g:

​​

The script should complete without error.

You can check it has applied by going to going to the Enterprise Application Availability Test (Web) monitor and checking for the override that should have been applied. The Override Value for the Script parameter should now start with “[Net.Service…” which is the first line in the updated script.

This should hopefully result in your availability test succeeding for the affected EA. Let me know how you get on with this.

Just to add to this, the web availability test script in the Coffee Break is available from Squared Up’s GitHub:

https://github.com/squaredup/SquaredUp.EAM.Library/blob/master/ManagementPacks/SquaredUp.EAM.Library/AvailabilityMonitoring/Monitors/Types/Web/Scripts/WebTest.ps1

Just add this line to the top of the script:

[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12

The Override-WebTests.ps1 script is found here: https://github.com/squaredup/Scripts/blob/master/Override-WebTests.ps1