立即与支持人员聊天
与支持团队交流

Foglight 5.9.8 - Installing Foglight on Windows with an External Microsoft SQL Server Database

Before Installing Foglight Installing Foglight
Preparing to install Installing a new version of the Management Server Installed directories Foglight settings HP patch checking tool Uninstalling Foglight Upgrading the Management Server Installing Foglight FAQ
Running the Management Server Installing and Upgrading Cartridges Installing Agents

FIPS-compliant mode

In FIPS-compliant mode, it is required to use FIPS-validated KeyStore type BCFKS.

Import the certificate into the Foglight default TrustStore in FIPS-compliant mode, <foglight_home>\config\security\trust.fips.keystore (default password: nitrogen) with the following command:
<foglight_home>\jre\bin\keytool -import -trustcacerts -alias <alias_of_cert> - file <path_to_cert_file> -keystore <foglight_home>\config\security\trust.fips.keystore -deststoretype BCFKS - provider org.bouncycastle.jcajce.provider.BouncyCastleFipsProvider -providerpath <foglight_home>\server\core\bc-fips.jar -storepass <store_pwd>

Setting up an encrypted database connection

The server.config file contains the optional parameter foglight.database.secureconn, which is used as part of the process of setting up an encrypted database connection for a MySQL® or Oracle® database. For Microsoft® SQL Server® database, ssl is enabled by default.

In Foglight FIPS-compliant mode, it is required to import the self-signed SQL Server certificates to Foglight TrustStore. For more information, refer to Importing self-signed certificates to Foglight TrustStore .

Setting up an encrypted LDAP connection with SSL

Use the following instructions if you need to encrypt communication between the Management Server and the LDAP server.

To encrypt communication between Management Server and LDAP:
1
Acquire the LDAP server certificate in .pem format from the administrator.
2
Import the certificate into the Management Server keystore, see Importing self-signed certificates to Foglight TrustStore .
* 
NOTE: In addition to the Root CA certificate, there may be one or more intermediate CA certificates. If so, make sure to import the Root CA certificate and all intermediate CA certificates in sequence.
3
On the navigation panel, under Dashboards, click Administration > Users & Security > Directory Services Settings.
4
Under LDAP Locations, click Edit.
5
Specify the LDAP server URL in the following format:
ldaps://ldap_server_host_name:636
 
* 
NOTE: The port number for LDAP over SSL is usually 636. Confirm the exact port number with your LDAP server administrator.
6
Restart the Management Server.

Using encryption when sending email from Foglight

You can use encryption when sending email from Foglight. To do so, you must enable Foglight to use the SSL protocol and configure the mail server used by Foglight to use an SSL certificate that is not self-signed.

You can configure Foglight to use the SSL protocol either on the Email Configuration Dashboard or by editing the related mail.use.ssl registry variable. See the Administration and Configuration Help for more information.

See the documentation for your mail server for information about configuring it to use an SSL certificate.

相关文档

The document was helpful.

选择评级

I easily found the information I needed.

选择评级