This article only applies to Squared Up Version 2.0. If you're looking for help with Squared Up Version 3.0, please visit our new knowledge base

Symptoms

When trying to log on to Squared Up a user sees the following message:

An error occurred when checking your permissions to use this site.

Unable to connect to Operations Manager. Try again or contact the administrator of this website.


Cause

Squared Up cannot communicate with SCOM.

Procedure

A. System Centre Data Access Service

In Server Manager check that the 'System Centre Data Access Service' is running. Restart the service and test again.

B. Check the SCOM server name

If Squared Up is not installed on a SCOM management server you may also need to check that the SCOM server name is correct, see Modifying Settings Using IIS Manager.

C. If you are using Windows Authentication, check that it is set up correctly

1. Run our Kerberos debugging tool found in the diagnostics download zip. This will check your SPN's are set up correctly.

2. Ensure that you have set up delegation correctly between Squared Up and your SCOM management server. To check this is set up correctly please follow the steps outlined below.

Delegation

Configure the System Centre Data Access Service (MSOMSdkSvc); this allows connection to SCOM data access service on behalf of the user logging on.

1. On the domain controller, open 'Active Directory Users and Computers', navigate to the Computers folder, right-click on the Squared Up server, and select Properties.

2. Select ‘Trust this computer for delegation to specified services only’ (We could also set ‘Trust this user for delegation to any service’, but this is less secure than defining a list of specified services).


3. Click Add, Users or computers, type the SCOM server name, click OK and double click on the server. Click on‘MSOMSdkSvc’ from the list of services and click OK.

If Squared Up is not installed on a SCOM management server then the Squared Up server must be configured for Kerberos Constrained Delegation.

See How to set up Single Sign-On using Kerberos Constrained Delegation.

For any high availability, web farm or load balancer setup see How to setup Kerberos Constrained Delegation with a load balancer

If you need assistance please raise a support ticket at http://support.squaredup.com/ or by emailing support@squaredup.com and we will be happy to help out. It would be very helpful if you could send a screenshot of the error page and a zip of the output of the Squared Up Diagnostics Script.