Foglight 5.9.5 - Installing Foglight on Windows with an External PostgreSQL Database

The <foglight_home>\config\server.config file contains parameters for port settings, virtual memory, command-line options, and server federation. You can edit the file using a text editor. Values within quotation marks can be edited.

Enabling High Availability mode after installation

If you want to run Foglight in High Availability (HA) mode but did not select this option during installation, you can enable HA mode after installation by editing the file server.config. For more information, see the Foglight High Availability Field Guide.

Changing external database credentials

Use the following method to reconfigure Foglight to start up with a new database password. The password can be updated in the server.config file.


	IMPORTANT: Do not use “<“ and “>” in your password, for example jo<anne>123. These characters corrupt the XML in the server.config file, causing Foglight to fail to start successfully.

To encrypt your database password using the keyman command:

Specify the following from the command line:

> bin\keyman -d [FGLHOME\config] encpwd "<new password>" foglight.defaultkey

The encrypted password appears.

Open the server.config file.

Replace the existing database password with the new encrypted database password on the following line:

server.database.password = "q4056753111e8a24c9a722048fc6df1f0"

Restart the Management Server.

Setting up an encrypted LDAP connection with SSL

Use the following instructions if you need to encrypt communication between the Management Server and the LDAP server.

To encrypt communication between Management Server and LDAP:

Acquire the LDAP server certificate in .pem format from the administrator.

Import the certificate into the Management Server keystore, <foglight_home>\jre\lib\security\cacerts (default password: changeit), with the following command:

<foglight_home>\jre\bin\keytool -J-server ‑import ‑file <path_to_cert_file> ‑alias ldapsvrcert ‑keystore <path_to_cacerts> ‑storepass <store_pwd>


	NOTE: If you do not specify the password using the ‑storepass option, keytool prompts you to supply it. NOTE: In addition to the Root CA certificate, there may be one or more intermediate CA certificates. If so, make sure to import the Root CA certificate and all intermediate CA certificates in sequence.

The following are the examples of command for importing Root CA and intermediate CA certificates:

•

Root CA certificate: <foglight_home>\jre\bin\keytool -import -trustcacerts -alias ldapsvrcert -keystore <path_to_cacerts> -storepass changeit -file <path_to_cert_file>

•

Intermediate CA certificate 1: <foglight_home>\jre\bin\keytool -import -alias ldapsvrcert2 -keystore <path_to_cacerts> -storepass changeit -file <path_to_cert_file>

•

Intermediate CA certificate 2: <foglight_home>\jre\bin\keytool -import -alias ldapsvrcert3 -keystore <path_to_cacerts> -storepass changeit -file <path_to_cert_file>

On the navigation panel, under Dashboards, click Administration > Users & Security > Directory Services Settings.

Under LDAP Locations, click Edit.

Specify the LDAP server URL in the following format:

ldaps://ldap_server_host_name:636