How to add a proxy certifcate to the ServiceNow Security Operations Add on

[becksyboy]

Hi,

we have a requirement to configure the ServiceNow Security Operations Add on to use a proxy url, proxy port and also a certificate for the proxy.

I can see there are option to specify proxy_url & proxy_port. Is it also possible to also integrate the certificate of our proxy? Does it need to be done within the add on or within Splunk or at the OS/Linux level?

thanks

[vikramyadav]

Try these steps:-

1. First, you need to convert zscaler certificate to .pem or get from the customer.
openSSL x509 -in ZscalerRootCertificate-2048-SHA256.crt -out zscaler.pem -outform PEM

2.  Insert .pem into o365 app cacert
cat zscaler.pem >> /opt/splunk/etc/apps/splunk_ta_o365/bin/3rdparty/certifi/cacert.pem

3. Ensure ownership
chown splunk:splunk *

4. Restart splunk

----------------------------------------------
If this helps like will be appreciated.

[thambisetty]

below thread might help you:

https://community.splunk.com/t5/All-Apps-and-Add-ons/Getting-error-when-trying-to-set-up-o365-Add-on...