-
タイトル
Oracle - How to import certificates when there is a connection error for no certificates -
説明
When monitoring remote Oracle databases in SSL mode, certificates for the database server must be imported into the keystore on the Agent Manager. -
対策
Oracle Cartridge in FIPS-compliant mode
When FMS is 5.9.7 and later in with FIPS compliance mode enabled, Oracle cartridge is 5.9.7.10 or later, we need to import the certificate into fogdb.store by the following step:
Step 1: Navigate to the Foglight Agent Manager (FglAM) to agent/lib folder. Taking version 5.9.7.10 as an example:
{fglam_home}/agents/DB_Oracle/5.9.7.10-5.9.7.10-xxxx-xxxx/lib
Step 2: Execute the command below to import the certificate
certificatetool-5.9.7.10.bat --add-certificate {alias}=\path\to\certificate\file
-
Linux:
chmod u+x certificatetool-5.9.7.10.sh
./certificatetool-5.9.7.10.sh --add-certificate {alias}=/path/to/certificate/file
For example
certificatetool-5.9.7.10.bat --add-certificate host1=c:\test.cer
Oracle Cartridge in the non-FIPS mode
When FMS is non-FIPS mode, to monitor Oracle with SSL enabled, we need to import the certificate by the following step:
Step 1: Ensure that the Agent Manager is running, go to the directory
{fglam_home}/bin
Step 2: Execute the command below to import the certificate:
fglam --add-certificate {alias}=/path/to/certificate/file
For example:
fglam --add-certificate server1=c:/test.cer
The following video uses the same process as described above for SQL Server certificates and is relevant for Oracle agents.
-