Security

port 8000 is SSL, port 8089 is not

wbcattell
Explorer

I've set up our Splunk Web interface to use 3rd party signed certs. On a Nessus scan it's being found and is passing the scan ok. However the management port - 8089 continues to fail Nessus with a self-signed certificate.

Are there different settings or a different file in which to modify to secure the management port?

I've already read this but must have missed the answer;

http://splunk-base.splunk.com/answers/54133/how-do-i-set-the-ssl-cert-for-the-management-port-8089

Thanks,

Bill

Tags (1)
1 Solution

jworthington_sp
Splunk Employee
Splunk Employee

Hi Bill,

You edit server.conf to communicate over the management port with SSL. Here's a link to a topic that provides an overview of how Splunk can be secured with SSL over the management port:

http://docs.splunk.com/Documentation/Splunk/5.0/Security/AboutsecuringSplunktoSplunkcommunication

I hope this helps!

View solution in original post

jworthington_sp
Splunk Employee
Splunk Employee

Hi Bill,

You edit server.conf to communicate over the management port with SSL. Here's a link to a topic that provides an overview of how Splunk can be secured with SSL over the management port:

http://docs.splunk.com/Documentation/Splunk/5.0/Security/AboutsecuringSplunktoSplunkcommunication

I hope this helps!

wbcattell
Explorer

Thanks. How do I accept one?

TIA,

0 Karma

piebob
Splunk Employee
Splunk Employee

hi wbcattell: i have accepted jworthington's Answer on your behalf, but in the future, please do explicitly accept an Answer on this site if it meets your needs. thanks! 🙂

0 Karma

wbcattell
Explorer

Excellent. That's what i needed to see.

Get Updates on the Splunk Community!

Announcing Scheduled Export GA for Dashboard Studio

We're excited to announce the general availability of Scheduled Export for Dashboard Studio. Starting in ...

Extending Observability Content to Splunk Cloud

Watch Now!   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to leverage ...

More Control Over Your Monitoring Costs with Archived Metrics GA in US-AWS!

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...