RestAPI Call to SolarWinds SAM

Hi Thwack Community,

I want to call Rest API on SAM Server.

Getting this message in PowerShell:

Invoke-RestMethod -Uri "https://SolarWinds-Orion:17774/SolarWinds/InformationService/v3/Json/Query?query=SELECT+TOP+1+NodeID+FROM+Orion.Nodes"
Invoke-RestMethod: The remote certificate is invalid because of errors in the certificate chain: UntrustedRoot

When I look on the Orion Server in the certlm (Certificates/Personal/Certificates) I can see the Certificate is valid, however in Certificate Status I see "This CA Root certificate is not trusted because it is not in the Trusted Root Certification Authorities store."

I assume this is the issue?

Is there a way in the command to skip this checking?

How can I fix that?

Thanks,

Andy

Certificate.jpg

certificate2.jpg

Find more posts tagged with

Comments

Lofstrand

The Rest API port, or SWIS endpoint, does not use the same certificate as the normal web service on port 443. By default it's a self signed certificate. But that can also be changed.

See this page, at the bottom: https://documentation.solarwinds.com/en/success_center/orionplatform/content/core-enabling-and-requiring-secure-channels-with-ssl-sw1514.htm

lenza

Okay, thanks for this info.

It seems like I am using the right endpoint when I look at my Advanced Config for Rest Endpoint, see attached file.

This means the following query fails, because the certificate is not valid (untrusted).

PS C:\Users\lenzan-a> Invoke-RestMethod -Uri "https://SolarWinds-Orion:17774/SolarWinds/InformationService/v3/Json/Query?query=SELECT+TOP+1+NodeID+FROM+Orion.Nodes"
Invoke-RestMethod: The remote certificate is invalid because of errors in the certificate chain: UntrustedRoot.

When I have a closer look at the certificate..there is a message "CA Root Certificate is not trusted.To enable trust, install this certificate in the Trusted Root Certification Atuthorities store"

AdvancedConf.jpg

lenza

Last question, when I configure Swis.RestEndpoint as in the link above, there is no impact on running services (console access etc.)

Lofstrand

No, you should be fine. Just go ahead!