You can edit the VMware Aria Operations for Logs agent configuration file to change the SSL configuration, add a path to the trusted root certificates, and say whether the agent accepts certificates.
This procedure applies to the VMware Aria Operations for Logs agents for Windows and Linux.
Prerequisites
For the
VMware Aria Operations for Logs Linux agent:
- Log in as root or use sudo to run console commands.
- Log in to the Linux machine on which you installed the VMware Aria Operations for Logs Linux agent, open a console and run pgrep liagent to verify that the VMware Aria Operations for Logs Linux agent is installed and running.
For the
VMware Aria Operations for Logs Windows agent:
-
Log in to the Windows machine on which you installed the VMware Aria Operations for Logs Windows agent and start the services manager to verify that the VMware Aria Operations for Logs agent service is installed.
Procedure
Example: Configuration
The following is an example of the SSL configuration for CA-signed certificates.
proto=cfapi port=9543 ssl=yes ssl_ca_path=/var/lib/loginsight-agent/cert ssl_accept_any=no ssl_accept_any_trusted=yes ssl_cn=LOGINSIGHT
The following is an example of the SSL configuration for accepting any type of certificates, including self-signed.
proto=cfapi port=9543 ssl=yes ssl_accept_any=yes