Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials
Store

Question about APE in Different Domain

I have a question about the Certificate. I got a new certificate on my MPE that has the SAN of the APE and HA APE. Do I need to put the full chain on the APE. I exported the intermediate and the root CA from the MPE and installed it on the APE. I am getting a TCP reset from server. When I bind the new certificate will this be enough? Is there a better way for me to test if the trust will work before taking SW down to bind the cert in the config wizard?

Find more posts tagged with

additional_poller

Accepted answers

All comments

Lofstrand

Are we talking about the certificate for the website here? If so, you don't have to bother about that on the APE's.

The other types of certificates are handled within solarwinds and there should not be a need to move them around.

cnorborg

Any firewall rules maybe? Worth a check…

SolarWindNoob

So we validated all the correct ports are open we are getting the error below

System.Net.WebException:The underlying connection was closed: Could not establish trust relationshipfor the SSL/TLS secure channel. --->System.Security.Authentication.AuthenticationException: The remote certificateis invalid according to the validation procedure.

We are getting TCP resets.

The next step I am going to do is run the config wizard and select the cert that has the SAN. I am running out of things to do and troubleshoot.

Lofstrand

The only certificate that you can do anything about in the config wizard is the certificate for the website. And the APE does not have a website.

SolarWinds do have certificates for internal communication, but those you should never need to adjust.

Then there might be that you have a certificate on the SQL server, can it be that certificate that the APE does not trust?

In cases like this, it's better to open a support ticket right away, to get faster assistance.