View an Example of Configuring Certificates for AI Engine

This topic illustrates how to configure custom certificates for the AI Engine Communication Manager (AIE ComMgr) and the Data Provider of the Mediator. For more information about the AI Engine, see Advanced Intelligence Engine.

1. Install the OpenSSL package, or extract the OpenSSL files to the directory C:\OpenSSL if using a Windows operating system.

   

   The OpenSSL executable expects the openssl.cnf file to be located on the root of the C:\OpenSSL directory. Ensure you copy it there from the C:\OpenSSL\bin folder.

2. Create a custom certificate using OpenSSL.

   CODE

   sudo openssl req -nodes -newkey rsa:2048 -keyout privatekey.key -out cert.crt -x509 -days 365
   sudo openssl pkcs12 -export -out cert.pfx -inkey privatekey.key -in cert.crt

3. Once the certificate is created, add the .pfx file to the certificate store:

   1. Open the Certificate Manager by searching for the certificate.
   2. Add the newly created certificate to the Personal certificate store:

      1. Run the following command:
         certlm

      2. Click Personal, All Tasks, and then Import.
      3. From the drop down menu, select Choose.
      4. Select the .pfx certificate.
         

         

4. Configure the Data Processor to use the certificate. For more information, see Modify Data Processor Advanced Properties.

   

   Make changes to the Data Processor Advanced Properties with extreme care! LogRhythm recommends that the Data Processor Advanced Properties only be modified with the assistance of LogRhythm Support, or by advanced users who have attended LogRhythm training.

   1. In the Client Console, on the main toolbar, click Deployment Manager.
   2. Click the Data Processors tab.
   3. Double-click the Data Processor you want to configure.

   4. Click the Advanced button at the lower-left corner.

   5. In the AIE Provider: TLS Security settings, select UseAIEDPTLSCert.

   6. Select AIEDPTLSCertSubject, and type the Common Name (CN=<CommonName>) used when creating the certificate.
      

      

5. Configure the AIE ComMgr to use the certificate.
   1. In the Client Console, on the main toolbar, click Deployment Manager.
   2. Click the AI Engine tab.
   3. On the bottom of the grid, click the Servers tab.
   4. Double-click the AI Engine you want to configure.

   5. Click the Advanced button at the lower-left corner.

   6. Select UseAIEComMgrTLSCert.
   7. Select AIEComMgrTLSCertSubject, and type the Common Name (CN=<CommonName>) used when creating the certificate.
      

      

6. To apply the certificate changes, restart the Mediator and the AIE ComMgr.