Configuring AMS Log Collection for SSL
- Vinodhraj DP
Owned by Vinodhraj DP
On the primary/main Primis sever (receiving AMS events)
========================================================
- run the following commands to open port 11011
firewall-cmd --zone=viscount --add-port=11011/tcp --permanent
systemctl restart firewalld
firewall-cmd --zone=viscount --list-ports
- generate a java keystore file containing the server certificate
https://www.sslshopper.com/article-how-to-create-a-self-signed-certificate-using-java-keytool.html
- edit /var/opt/viscount/etc/env
--------------------------------
- add this line before ENGINE_LIBS
AMS_SSL=yes
- add the following options at the beginning of ENGINE_DAEMON_OPTS=
"-Djavax.net.ssl.keyStore=<java keystore absolute file path> -Djavax.net.ssl.keyStorePassword=<keystore password> "
- add the following options at the beginning of DSR_DAEMON_OPTS
"-DAMS_SSL=$AMS_SSL "
--------------------------------
- systemctl restart engine tomcat viscount-dsr
On the Primis secondary server
================================
- edit /var/opt/viscount/etc/env
--------------------------------
- add this line before ENGINE_LIBS
AMS_SSL=yes
- systemctl restart engine tomcat viscount-dsrÂ