SQL PI Repository – How to Import Certificates When a Connection Error Indicates Missing Certificates (4228724)

When connecting to a remote SQL Server PI repository in SSL mode, the Foglight Agent Managers and Foglight Management Server (FMS) must trust the database server's certificate. This requires importing the certificate into the appropriate keystores.

Foglight Management Server (FMS)

Import the certificate into the default truststore:

1. Navigate to {Foglight}/jre/bin.
2. Run the following command:

keytool -import -trustcacerts -alias host1   -file c:/test.cer   -keystore C:/Quest/Foglight/config/security/trust.fips.keystore   -deststoretype BCFKS   -provider org.bouncycastle.jcajce.provider.BouncyCastleFipsProvider   -providerpath C:/Quest/Foglight/server/core/bc-fips.jar   -storepass nitrogen -noprompt
    

Note: In federation mode, import the certificate into both master and child FMS instances.

Foglight Agent Manager (FglAM)

Import the certificate into fogdb.store on both the DB agent manager and PI agent manager:

1. Navigate to the appropriate lib directory:
   {fglam_home}/agents/DB_SQL_Server/5.9.7.10-xxxx/lib or {fglam_home}/agents/DB_Oracle/5.9.7.10-xxxx/lib
2. Run the following command:

Windows:

certificatetool-5.9.7.10.bat --add-certificate host1=c:\test.cer

Linux:

chmod u+x certificatetool-5.9.7.10.sh
./certificatetool-5.9.7.10.sh --add-certificate host1=/path/to/test.cer
    

The following video details the certificate installation steps.