Hello, I hope below step is helpful for you. Configuring SSL for Splunk Management Port (mgmt port) on port 8089 involves a few steps. 1. Generate SSL Certificates: Use a tool like OpenSSL to generate SSL certificates (private key, public key, and certificate signing request). ```bash openssl req -new -newkey rsa:2048 -keyout splunk.key -out splunk.csr ``` 2. Get the Certificate Signed: Submit the `splunk.csr` to a Certificate Authority (CA) to obtain the signed SSL certificate. Once received, you should have the SSL certificate and CA's intermediate certificate. 3. Create SSL Cert Files: Combine the private key, signed certificate, and CA intermediate certificate into a single PEM file: ```bash cat splunk.key splunk.crt ca_intermediate.crt > splunk.pem ``` 4. Copy Certificates to Splunk Directory: Move the `splunk.pem` file to the `$SPLUNK_HOME/etc/auth` directory. ```bash cp splunk.pem $SPLUNK_HOME/etc/auth ``` 5. Configure Splunk Web: Edit the `web.conf` file in `$SPLUNK_HOME/etc/system/local`: ```ini [settings] enableSplunkWebSSL = true privKeyPath = $SPLUNK_HOME/etc/auth/splunk.pem serverCert = $SPLUNK_HOME/etc/auth/splunk.pem ``` 6. Restart Splunk: Restart Splunk to apply the changes: ```bash $SPLUNK_HOME/bin/splunk restart ``` Ensure Splunk starts without errors. 7. Access Splunk via HTTPS: After the restart, you should be able to access the Splunk Management Port via HTTPS using the URL: ```text https://your-splunk-server:8089 ``` Make sure to replace `your-splunk-server` with the actual server hostname or IP. Remember to keep backups of any configuration files before making changes and consult Splunk's official documentation for the specific version you are using, as configurations may vary.
... View more