topic How to update root certificates on a Splunk 4.2 Forwarder on Windows 2000 without PowerShell? in Getting Data In

How to update root certificates on a Splunk 4.2 Forwarder on Windows 2000 without PowerShell?

ruiaires — Tue, 21 Jun 2016 10:18:07 GMT

Hi,

Following the root certificate expiration explained at:
https://answers.splunk.com/answers/395886/for-splunk-enterprise-splunk-light-and-hunk-pre-63.html?elqTrackId=4f5861c90f7f4a75b297cee5d33506ec&elq=e309d0c8f1384115a2e523a45004dd5b&elqaid=7582&elqat=1&elqCampaignId=

Is there a way to update root certificates on a Splunk 4.2 Forwarder running on a "legacy" Windows 2000 server without PowerShell support?

Thanks

Re: How to update root certificates on a Splunk 4.2 Forwarder on Windows 2000 without PowerShell?

jkat54 — Tue, 21 Jun 2016 10:46:23 GMT

You could do it with a batch file. Create the batch script, deploy it via app, and put a scripted input in the app that runs the batch file one time per hour (for example), and then deploy the app, wait an hour, and finally remove the app.

Or sometimes I'll make the script run every 5 minutes and put code in the script to disable the scripted input after execution.

Another fine solution would be to write a c sharp (C#) app which is called by a batch file.

Re: How to update root certificates on a Splunk 4.2 Forwarder on Windows 2000 without PowerShell?

ruiaires — Tue, 21 Jun 2016 12:07:07 GMT

Thanks,
console access is not an issue, so the scripted input suggestion does not help here 😉

So the challenge would be to convert the provided PowerSell script to a standard batch file:
http://download.splunk.com/products/certificates/renewcerts-2016-05-05.zip

Re: How to update root certificates on a Splunk 4.2 Forwarder on Windows 2000 without PowerShell?

jkat54 — Tue, 21 Jun 2016 13:36:29 GMT

If you have console access then you dont need a scripted install.

Just install splunk on any computer and copy the certificate generated by the fresh install to the windows 2000 machine.