Why am I unable to auto generate a certificate in "Splunk Add-on for Microsoft Cloud Services" Add-on.?

[bmanan7]

I installed this add-on(Splunk Add-on for Microsoft Cloud Services) and configured it for my cloud instance. However, when I am trying to generate a new certificate I am getting the error below.

"Error in generating the certificate.". I have no clue why I am getting this error.
I have blank certificate in "/opt/splunk/etc/apps/Splunk_TA_microsoft-cloudservices/default/splunk_ta_ms_o365_server_certificate.conf" file.

Can someone please help me with the solutions/workaround if someone has faced this error before in any cloud instance?

[jconger · Accepted solution]

You may want to run a search on the _internal index to get some more clues. Something like this:

index=_internal source=*microsoft* error

Having a blank /opt/splunk/etc/apps/Splunk_TA_microsoft-cloudservices/default/splunk_ta_ms_o365_server_certificate.conf file is expected behavior.

Once you successfully generate a certificate, the details will be stored in /opt/splunk/etc/apps/Splunk_TA_microsoft-cloudservices/local/splunk_ta_ms_o365_server_certificate.conf (notice the change in path to local). Here is what my file in local looks like:

[certificate]
disabled = 0
manifest_json = {"keyCredentials": [{"keyId": "***", "type": "AsymmetricX509Cert", "customKeyIdentifier": "***", "value": "---", "usage": "Verify"}]}
private_key = ********
status = generated_valid
last_verified_time = 2018-04-03 17:43:22 CDT

[bmanan7]

Hi @jconger,

Thanks for quick response. That search query would definitely help to figure out the problem.
But I was facing this error as there were some issues with the bundle of the app itself. I re-installed it from the splunkbase after removing the app and it worked for me. However who so ever is facing this problem please use the search query or go through the logs which will help to figure out the problem.

[p_gurav]

Did you follow steps given in document:

https://docs.splunk.com/Documentation/AddOns/released/MSCloudServices/Configurecertificate

[bmanan7]

Yes, I have followed all the steps as mentioned in the doc.