Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials
Store

Updating SSL Certificates Using Orion Configuration Wizard

I have recently taken over an Orion configuration, and I am pretty unfamiliar w/ these tools. We have an SSL certificate expiring in the next week and I want to make sure I understand the certificate installation/update process. We have the 2017+ version, so if I understand it right, I will be using the Configuration Wizard to update the certificate? I have a few concerns:

1. When I look at the site in IIS, it has no bindings except 80. I was told this was already setup for HTTPS. Apparently it isnt? Would this reflect within IIS or is there a Tomcat server running somewhere?

2. My primary concern is that the Configuration Wizard is mainly meant for initial installation, not an SSL upgrade or installation after the fact. For example the configuration wizard shuts down services when it runs. An SSL binding shouldn't require a shutdown of all services, so it seemed like there might be gentler way to update (or install) an SSL certificate to an existing Orion deployment. Yes?

Thank you!

Find more posts tagged with

Accepted answers

All comments

shuth

You should be able to update the SSL certificate in your site binding in IIS.

Load the new certificate, open up IIS, find the SolarWinds NetPerfMon site, edit bindings, swap to the new certificate.

If the binding is only showing HTTP, that's a different problem...

sturdyerde

I would agree. You should be able to manually set/update the certificate bindings in IIS without having to run the configuration wizard.

jdubintx

"You should be able to update the SSL certificate in your site binding in IIS.

Load the new certificate, open up IIS, find the SolarWinds NetPerfMon site, edit bindings, swap to the new certificate.

If the binding is only showing HTTP, that's a different problem..."

Thanks, that clears things up a bit. I was worried there was a Tomcat/Apache server running somewhere that was hosting the NetPerfMom site with an SSL binding. If everything is done in IIS then I am on the right track.

Right now, there are no HTTPS/443 bindings for the NetPerfMon site in IIS. Only 80. So I assume this means the site hasn't been configured for HTTPS? Does this mean I will need to run the configuration wizard, or can I just add the SSL binding?

Most importantly, if I do need to run the configuration wizard, I noticed it wants to shutdown services so its probably best to be done during off-hours. What other changes does this wizard make? It worries me that its used for initial configuration, I don't want it to overwrite any configurations or site content made over time.

Thank you!

shuth

If you don't access SolarWinds with https://server then the site hasn't been configured for HTTPS.

It is recommended to run the Configuration Wizard to enable HTTPS.

The Configuration Wizard will take the system offline after you confirm the website changes. If you have any custom files in your inetpub\SolarWinds folder, they WILL BE REMOVED. If you are unsure of any customisations, take a backup of the inetpub\SolarWinds folder just in case.

Run the Config Wizard
Select the Website option
Untick Skip website binding and tick Enable HTTPS
1. The system will generate a self-signed certificate. You can select the new certificate here (if it is loaded into the system) or you can update it in IIS later without running the wizard again.

If no issues, the system will go down for 15-30 minutes.