topic Re: unable to generate certificate for ssl when regenerating Cert in Splunk Enterprise

unable to generate certificate for ssl when regenerating Cert

myazdzik — Thu, 21 Mar 2024 14:52:55 GMT

My kvstore is failed and I am trying to renew my certificate, my Splunk server is on a windows server. I have tried the steps by removing the server.pem and server_pkcs1.pem from ..\Splunk\etc\auth\ as well as delete the expired Cert SplunkServerDefaultCert from Cerlm. this method worked for me in four other deployments however this one deployment, when I go start my Splunk services, I get failure to start Splunkd with an error message " Unable to generate certificate for SSL. Splunkd port communication may not work (Child failed to start: FormatMessage was unable to decode error (193), (0xc1)) SSL certificate generation failed.

Re: unable to generate certificate for ssl when regenerating Cert

KendallW — Mon, 25 Mar 2024 23:50:35 GMT

https://community.splunk.com/t5/Security/Certificate-generation-failed-Splunkd-port-communication-will/m-p/318926#M12902

Re: unable to generate certificate for ssl when regenerating Cert

ayush1906 — Tue, 26 Mar 2024 03:08:42 GMT

check permission issue in log files

splunkd ... mongod logs

Check file ownership and permission for server.pem, server.key