Converse agora com nosso suporte
Chat com o suporte

Foglight 5.9.5 - Installing Foglight on a UNIX System with an External MySQL Database

Before Installing Foglight Installing Foglight
Preparing to install Installing a new version of the Management Server Installed directories Foglight settings HP patch checking tool Uninstalling Foglight Upgrading the Management Server Installing Foglight FAQ
Running the Management Server Installing and Upgrading Cartridges Installing Agents

Setting up an encrypted database connection with SSL

The following procedure outlines how to set up a secure external MySQL® database connection and verify that the MySQL® Server supports SSL encryption.

2
Update the MySQL configuration file (my.ini) with the new security certificate and key information by adding the following properties:
3
Uncomment and set the server.database.secureconn attribute in the server.config file to true, as shown below.
1
Ensure that the MySQL Server (mysqld program) for your Foglight database is running.
2
Login to mysql:
3
At the mysql prompt, run the following query:
4
The output shows the variable have_ssl with a value of either YES or DISABLED.
If the value is YES, the MySQL® Server supports SSL connections. If the value is DISABLED, the MySQL Server supports SSL connections but was not started with the appropriate SSL command options (-ssl-<option_name>=<value>). See the MySQL documentation for more information about these options.

Setting up an encrypted LDAP connection with SSL

Use the following instructions if you need to encrypt communication between the Management Server and the LDAP server.

1
Acquire the LDAP server certificate in .pem format from the administrator.
2
Import the certificate into the Management Server keystore, <foglight_home>/jre/lib/security/cacerts (default password: changeit), with the following command:
<foglight_home>/jre/bin/keytool -J-server ‑import ‑file <path_to_cert_file> ‑alias ldapsvrcert ‑keystore <path_to_cacerts> ‑storepass <store_pwd>
Root CA certificate: <foglight_home>\jre\bin\keytool -import -trustcacerts -alias ldapsvrcert -keystore <path_to_cacerts> -storepass changeit -file <path_to_cert_file>
Intermediate CA certificate 1: <foglight_home>\jre\bin\keytool -import -alias ldapsvrcert2 -keystore <path_to_cacerts> -storepass changeit -file <path_to_cert_file>
Intermediate CA certificate 2: <foglight_home>\jre\bin\keytool -import -alias ldapsvrcert3 -keystore <path_to_cacerts> -storepass changeit -file <path_to_cert_file>
3
On the navigation panel, under Dashboards, click Administration > Users & Security > Directory Services Settings.

Using encryption when sending email from Foglight

You can use encryption when sending email from Foglight. To do so, you must enable Foglight to use the SSL protocol and configure the mail server used by Foglight to use an SSL certificate that is not self-signed.

You can configure Foglight to use the SSL protocol either on the Email Configuration Dashboard or by editing the related mail.use.ssl registry variable. See the Administration and Configuration Help for more information.

See the documentation for your mail server for information about configuring it to use an SSL certificate.

Configuring ports

You can set a number of different ports using the file <foglight_home>/config/server.config, including mandatory ports required for Foglight to run.

For a list of these ports, their default values, and the configuration parameters you can use to set them in server.config, see the Administration and Configuration Help.

Documentos relacionados

The document was helpful.

Selecione a classificação

I easily found the information I needed.

Selecione a classificação