Why am I getting error "SSL certificate generation failed" while starting the splunkd process on the universal forwarder?

[kpavan]

Hi All,

I'm unable to start the splunkd process on the universal forwarder and it's giving an error that SSL certificate generation failed. Could you please let me know if there any specific configuration issue?

Thanks!
Pavan

[splunkadunk5]

In my case it ended up being Cylance.

[gesman_splunk]

We had reports that antivirus services might cause that.

Check if there are any antivirus or similar resource-hungry services are running and try disabling them and restarting Splunk to test.

Also lack of resources - particularly memory could be generally related cause.

[shirishkamat84]

Did anyone figured this out and identified a fix. I did not find any answers to this particular problem

[jwelch_splunk]

If you are running AV try disabling it and see if that fixes it

[jkuma39]

In My case, i tried installing a new splunkforwader and started splunk and got below error. Can you please let me know what can be reason for this?

Splunk> CSI: Logfiles.

Checking prerequisites...
Checking mgmt port [8089]: open
ERROR: pid 13672 terminated with signal 11
SSL certificate generation failed.

Iinux Version: Linux lgdwd511 2.6.32-696.6.3.el6.x86_64 #1 SMP Fri Jun 30 13:24:18 EDT 2017 x86_64 x86_64 x86_64 GNU/Linux

[jmallorquin]

Hi,

Did you change the default certificate?
Did you review the splunkd.log file?