SCOM Management Server showing warning with Event ID 1825 - A security package specific error occurred

SCOM Management Server showing warning with "Event ID 1825 - A security package specific error occurred"

• Today when i checked the SCOM management Server it was in Warning state.
• When i open the health explorer i could see only "Failed to access event log" is selected and its in warning state with error in details "A security package specific error occurred".
• When i tried to access the event log from the SCOM management server it failed with the same error.
• so i decided to do a nslookup of the server and found that the reverse lookup is pointing to the alias of the server rather then the actual server name.
• Once it was resolved things got health again.
• So when you have this issue, its usually issue with the DNS entries which needs to be fixed

SCOM Agent Uninstall error : The patch Package could not be opened

SCOM Agent Uninstall error : The patch Package could not be opened

• SCOM agent uninstall was always a piece of Cake. Jut right click and select uninstall from console

• But recently i was migrating from SCOM 2007 to SCOM 2012 and i have to uninstall SCOM 2007 R2 agents.Most went wellBut few failed with error

"The patch Package could not be opened. Verify that the patch package exists and that you can access it.Or contact the application support."

• First reaction was shocked. Haven't seen this error.I have access and all the msi to uninstall.

• Later i found out that issue is because of fact that the agent creates a reg entry of while installing with unique patch number.And if this conflicts or if there multiple of them then it will fail.

So to fix It follow the below steps,

• Click Start
• In Search type Regedit
• Click on HKEY_CLASSES_ROOT\Installer\Products\07779052F1B26F94BAD9C107B8
• Then double click on "Patches"
• Delete all the Values in it and Close it.
• Now go and try to uninstall it and it will work fine.