Setting up SSL for Scrutinizer v7
Posted in Scrutinizer on November 16th, 2009 by scottrI have been receiving a number of calls lately with requests to enable SSL on Scrutinizer v7.
Enabling SSL on Scrutinizer v7 has been made much easier than in past releases of Scrutinzer. You no longer need to download OpenSSL and manually configure the SSL Key and certificate, or set up the apache config files.
You must first contact Technical Support at Plixer International, to obtain the Scrutinizer v7 – SSL installshield.
You can install the SSL version over your current Scrutinizer v7 install.
Once the install is complete, you will need to run the scrut_util command to finish the SSL setup.
Open a CMD prompt, and navigate to [HOMEDIR]/SCRUTINIZER/BIN.
Run the scrut_util program with the following command options:
-ssl [ON] [TCPORT] [COUNTRY] [STATE] [CITY] [ORG] [EMAIL] [COMMON]
Where:
| TCPORT | TCP Port to be used |
| COUNTRY | The two-letter ISO abbreviation for your country (US = United States) |
| STATE | The state/province where your organization is located. Can not be abbreviated. (example: Maine) |
| CITY | The city where your organization is located (example: Atlanta) |
| ORG | The exact legal name of your organization. Do not abbreviate. (example: Plixer International, Inc.) |
| The email address for the CA (who to contact) | |
| COMMON | URL that you wish to attach the certificate. (example; 10.1.1.10 or scrutinizer.company.com) |
Restart the plixer_apache service, and logon to server with HTTPS.
A few things to note:
All fields are required when [ON] is used.
Make sure to put ” ” around the parameters that have white spaces.
To disable SSL, you must use -ssl OFF, as the scrut_util option.
In order to change the SSL certificate, you must first disable SSL, then add the new certificate information.
Don’t hesitate to give us a call if you have any questions.
Scott
Tags: NetFlow, OpenSSL, Plixer International, Scrutinizer, setting up SSL, sFlow, SSL