Splunk Enterprise

Unsecure Splunk Browser

arielpconsolaci
Path Finder

Hi Splunkers,

I am new to handling certificates but it seems to be the resolution that I need to resolve the unsecure browser issue when accessing my Splunk UI.

We have been given a certificate in .cer generated from a csr in which we listed the DNS of our Splunk instance.

Now I understand that we can generate a .pem out of this .cer but I am unclear as to the private key to use based on the parameters that we need to set in web.conf

[settings]
enableSplunkWebSSL = true
privKeyPath = <.key here>
serverCert = /home/user/certs/mycacert.pem

Reference: https://docs.splunk.com/Documentation/Splunk/9.0.5/Admin/Webconf

Would anyone be able to provide direction on this please?

Thanks a lot.

Cheers!

0 Karma

PickleRick
SplunkTrust
SplunkTrust

And what is the question?

As you generated CSR, you should have already generated a key for which you were creating the CSR so you must have it somewhere. Otherwise the cert you got is useless because it is paired to your private key.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

What's New in Splunk Enterprise Security 8.8 and Beyond

Threats move at machine speed. Keeping up should not depend on having the biggest budget, the largest team, or ...

A Four-Part Event Series: State of Observability - Where AI Meets Performance

As AI agents take on more complex tasks, teams need greater visibility into how they behave, what they cost, ...

Persistent Queue at TcpOut — One of Splunk's Most Practical Features

Splunk introduced persistent queueing at the tcpout layer as one of the most practical resilience features in ...