These articles are very clear about it:
However, the tool operated from the command line for this purpose, scxcertconfig.exe, is rather silent. There is not a single statement telling you all went okay. Of course, for the export switch we do see a result (the exported SCX certificate) but when importing those certificates on the other SCOM 2012 Management Servers, there is no feedback whatever.
And yes, we may ASSUME everything went just fine, but as we all know, assumption is the mother of all… So how to check for the correct execution of the import command? This is actually simple and straight forward and takes no time what so ever.
Along came MMC
- Start mmc.exe;
- File > Add/Remove Snap-in > Certificates > Add > Service Account > Local Computer > Next;
- Now select the Microsoft Monitoring Agent (SCOM 2012 R2, for previous version select System Center Management);
- > Finish > OK > Console Root > Certificates – Service > HealthService\Trusted Root Certification Authorities;
- Now in the middle pane you’ll see the imported SCX certificates. The Friendly Name tells you by what SCOM 2012 Management Server the SCX certificate is issued:
Run this procedure on every SCOM 2012 Management Server which is part of the Resource Pool, used for monitoring the UNIX/Linux based servers/workloads.