Novell SENTINEL LOG MANAGER 1.0.0.5 - 03-31-2010, Administration Manual

Page: 51 / 168

Configuring Data Collection 51
no
vd
ocx
(e
n)
19
Fe
bru
a
ry
20
10
Š
“Importing a Truststore” on page 51
Š
“Server Key Pair” on page 52
Creating a Truststore
For strict authentication, you must have a truststore that contains either the certificate of the event
source or the certificate of the certificate authority (CA) that signed the event source certificate.
After you have a DER or PEM certificate, you can create the truststore by using the CreateTruststore
utility that comes with Log Manager.
1 Log in to the Sentinel Log Manager server as novell.
2
Go to
/opt/novell/sentinel_log_mgr_1.0_x86/data/updates/done
.
3 To extract the
syslog_connector.zip
file.
unzip syslog_connector.zip
4 Either copy the
TruststoreCreator.sh
or
TruststoreCreator.bat
file to the machine
with the certificates or copy the certificates to the machine with the TruststoreCreator utility.
5 Run the
TruststoreCreator.sh
utility.
TruststoreCreator.sh -keystore /tmp/my.keystore -password password1 -certs
/tmp/cert1.pem,/tmp/cert2.pem
In this example, the TruststoreCreator utility creates a keystore file called
my.keystore
that
contains two certificates (
cert1.pem
and
cert2.pem
). It is protected by the password
password1 . The keystore file must be imported into the truststore.
Importing a Truststore
For strict authentication, the administrator can import a truststore by using the Import button. This
helps ensure that only authorized event sources are sending data to Log Manager. The truststore
must include either the event source certificate or the certificate of the certificate authority that
signed it.
The following procedure must be run on the machine that has the truststore on it. You can open a
Web browser on the machine with the truststore or move the truststore to any machine with a Web
browser.
To import a truststore:
1 Log in to the Sentinel Log Manager as an administrator.
2 Click the collection link at the upper left corner of the page.
The Collection tab is displayed on the right pane of the page.
3 Click the Event Source Servers tab.
4 In the Syslog Server section, select the Strict option under Client authentication .
5 Click Browse and browse to the truststore file (for example,
my.keystore
)
6 Specify the password for the truststore file.
7 Click Import .
8 If desired, click Details to see more information about the truststore.
9 Click Reset to change the specified settings to previous setting before saving it
10 Click Save .