topic Need help on SSL Certificate Monitor extension in Extensions

Need help on SSL Certificate Monitor extension

ecataldo03 — Mon, 05 Aug 2024 21:56:01 GMT

Hello Everyone:

We have the SSL certificate extension installed. Is there a way to perform a auto-discovery of all the certificates installed in our environment?.

Regards.

Re: Need help on SSL Certificate Monitor extension

p_devulapalli — Tue, 06 Aug 2024 05:53:38 GMT

I think you need to have a OneAgent running on the host to have the certificate auto discovered or you would need to use the ActiveGate domain based discovery

Re: Need help on SSL Certificate Monitor extension

ben_davidson — Tue, 06 Aug 2024 13:22:15 GMT

p_devulapalli is correct. Certificate auto-discovery requires the SSL Certificate Extension to be enabled locally on OneAgent monitored hosts. The extension uses data collected by the OneAgent to help identify certificates on the host. We recommend deploying the extension using a limited deployment (filter on a management zone, tag, etc) to first to test the extension before deploying it environment wide.

Re: Need help on SSL Certificate Monitor extension

RTT — Thu, 30 Jan 2025 07:20:36 GMT

Would Infrastructure monidoing mode be sufficient to perform Certificate auto-discovery on the monitored hosts with OneAgent. Or is full-stack monitoring needed?

Re: Need help on SSL Certificate Monitor extension

p_devulapalli — Thu, 30 Jan 2025 22:41:27 GMT

@RTT You should be able to monitor certificates in "Infrastructure Only" mode