Encrypt communication between the Foglight Management Server and the LDAP server (4286322)

Encrypt communication between the Foglight Management Server and the LDAP server.

To encrypt communication between Foglight Management Server and LDAP server:

1. Acquire the LDAP server certificate in .pem format from the administrator
2. Import the certificate into the Foglight Management Server keystore using command:

   [FMS_HOME]/jre/bin/keytool -keystore [FMS_HOME]/jre/lib/security/cacerts -storepass changeit -import -alias ldapsvrcert -file [path to CA CERT File]

3. Go to Administration | Users & Security | Configure Directory Services
4. Click Edit
5. Enter the LDAP server URL in the following format ldaps://ldap_server_host_name:636
6. Configure the rest of Directory Services settings

Notes:

• The port number for LDAP over SSL is usually 636. Confirm the correct port number with your LDAP server administrator.
• In non-FIPS mode, to be compatible with former Foglight versions, Foglight uses JRE TrustStore as the default TrustStore. The default TrustStore will NOT be preserved during Foglight upgrade. Foglight also support a separate TrustStore, which will be preserved during upgrade. For more information refer to the Importing self-signed certificates to Foglight TrustStore section in any of the Foglight Installation Guides.