Introduction
Managing SSL certificate settings in large SolarWinds Orion environments can be challenging, especially when the SWIS REST endpoint settings do not load in the web console due to the system’s scale. This PowerShell script simplifies the process by providing an interactive interface to view, modify, and reset certificate settings directly through the SolarWinds Information Service (SWIS) API.
What This Script Does
This script is designed to help Orion administrators:
Retrieve and display SSL certificate settings for Orion servers.
Update SSL certificate settings when needed.
Reset SSL certificate settings to their default values.
Export certificate settings to a CSV file for reporting and analysis.
The script interacts with SolarWinds' SWIS API, allowing administrators to make necessary changes efficiently without relying on the web console.
How It Works
The script follows a structured approach:
Connects to SolarWinds SWIS API – Establishes a secure connection to Orion using provided credentials.
Retrieves Orion Server Certificate Settings – Queries the Orion database to fetch current certificate configurations.
Updates Certificate Settings – Allows administrators to specify a new SSL certificate for a given Orion server.
Resets Certificate Settings to Default – Removes any custom certificate setting overrides.
Exports Certificate Data – Outputs all server certificate settings into a CSV file for further analysis.
Provides an Interactive Menu – Users can select actions through a simple command-line menu.
Why Use This Script?
In large Orion deployments, modifying SWIS REST endpoint settings can be cumbersome due to web console limitations. This script provides a fast and reliable way to make necessary changes while ensuring that settings remain accurate and trackable.
How to Use It
Run the Script
Ensure you have PowerShell 5.1 or later installed.
Load the required OrionSDK module.
Execute the script in a PowerShell session.
Authenticate to Orion
Select an Action
View current certificate settings.
Modify a server’s certificate setting.
Reset a certificate setting to its default value.
Export all certificate settings to a CSV file.
Apply Changes
Examples
View the current servers and the SWIS Endpoint Certificates applied
View more information about a server
Update/Create a Certificate: This option will create a new override if one does not exist or update a current overrides value.
- Remove an override (Reset to default)
Notes & Limitations
The script should be run with administrator privileges.
Always verify certificate changes before restarting services.
The script is provided "as-is" and should be tested in a lab environment before deploying in production.
- The certificate to be used must be in the Local Machine - Personal certificate store.
Conclusion
Managing SSL certificates in Orion doesn’t have to be complicated. With this PowerShell script, administrators can streamline certificate management, troubleshoot issues, and ensure secure communication across Orion servers. This tool is a must-have for any Orion environment struggling with web console limitations in large-scale deployments.
For any questions or support, feel free to comment on THWACK or reach out to Leads@loop1.com team!