Getting Data In

Is it possible to set the certificate and private key for NICs with different FQDN?

human96
Communicator

In your environment, one Splunk server has two NICs, each There is a different FQDN. In this case, is it possible to set the certificate and private key for both NICs?

0 Karma

human96
Communicator

If you can, please tell me how to set it.

0 Karma

PickleRick
SplunkTrust
SplunkTrust

You need to generate a CSR with multiple DNS names as SAN. The way to do this varies depending on what tool you're using. Then you have to give this CSR to your CA guys which will generate proper certificate with many names. If you're using openssl suite for this - google for the multiple SANs CSR generation - there are plenty solutions described on the internet.

Of course when you get your cert, you have to conifgure your splunk instance using those certs as the docs say. https://docs.splunk.com/Documentation/Splunk/8.2.4/Security/AboutsecuringyourSplunkconfigurationwith...

0 Karma

PickleRick
SplunkTrust
SplunkTrust

Private key has nothing to do with what it's used for.

And yes - the certificate can be used for multiple names. It's called "SANs" - Subject Alternative Names.

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...