cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
HannahM
Dynatrace Leader
Dynatrace Leader

By default, Browser Monitors are executed in a Chrome Browser that ignores certficate errors. In some scenarios you may wish for your Browser Monitor to fail if there is a certificate error. 

These steps will work for all location types - Public, Private and Cluster. 

How to create a Browser Monitor that does not ignore certificate errors

  1. Go to Synthetic in the Dynatrace menu.

  2. Select Create a synthetic monitor at top right > Create a browser monitor.

  3. On the Configure a browser monitor page, type in the URL you want to monitor and either use the default Name or provide your own.

  4. Select Script Mode
    HannahM_0-1692287893276.png

     

  5. Add the following to the configuration section under chromiumStartupFlags
                "ignore-certificate-errors": false​

    HannahM_1-1692288113377.png

     

  6. Add any further steps required
  7. Choose Next to continue configuration—select monitor locations and frequency. See Configure browser monitors for details.
  8. Select Next at the bottom of the page to view the monitor summary.

  9. On the Summary page, you can review and change your configuration (Change URL or name; Change configuration).

  10. At the bottom of the page, select Create browser monitor. 

 

Update a Browser Monitor to not ignore certificate errors

  1. Go to Synthetic in the Dynatrace menu.

  2. Select the browser monitor you want to configure.

  3. Select Edit from the quick links to go to monitor settings. Alternatively, you can go to the Synthetic monitors page, select the checkbox next to the monitor you want to edit, and select Edit at the bottom of the page.

  4. Select Recorded Clickpath , if it's a Browser Clickpath monitor, or Monitor Script
  5. Select Script Mode
  6. Add the following to the configuration section under chromiumStartupFlags
                "ignore-certificate-errors": false​

    HannahM_1-1692288113377.png

     

  7.  Select Save Changes

Get advanced warning of a certificate expiring

If you would like to be warned in advance of the certificate's expiry, you can use the HTTP Monitor SSL Certificate expiry option. 
https://www.dynatrace.com/support/help/platform-modules/digital-experience/synthetic-monitoring/http...

Version history
Last update:
‎28 Dec 2023 11:05 AM
Updated by:
Comments
ChadTurner
DynaMight Legend
DynaMight Legend

Thank you for Sharing this @HannahM 

AntonioSousa
DynaMight Guru
DynaMight Guru

@HannahM,

I confess I'm a little bit confused here, and not what I was expecting: by default, a Chrome Browser does not ignore cert errors, but indeed tries that the user not proceed to a site with an invalid cert.

This implies that sites with a self-signed, invalid CA or whatever invalid cert may be out there, do not give an error by default in browser monitors?

HannahM
Dynatrace Leader
Dynatrace Leader

For Browser monitors, we start the Browser with the 

--ignore-certificate-errors

parameter. This does indeed ignore certificate errors. 

AntonioSousa
DynaMight Guru
DynaMight Guru

@HannahM,

Thanks for the clarification. If asked before, I would certainly not have said it worked this way 😁 But I do understand why it's done this way...