Enable SSL communication in Aria Operations for Logs agent in SDDC Manager
book
Article ID: 373754
calendar_today
Updated On:
Products
VMware SDDC ManagerVMware Aria Operations 8.x
Issue/Introduction
Upon Aria Operations for Logs deployment, SDDC Manager deploys a dedicated agent so SDDC Manager can upload its logs to that Aria Operations for Logs instance. The agent is preconfigured (in SDDC Manager codebase) to use non-ssl communication.
Environment
VCF 4.x VCF 5.x
Cause
This is by design.
Resolution
To enable SSL communication between the preinstalled Aria Operations for Logs (a.k.a. vRealize Log Insight) agent and the Logs product instance in the VCF enabled environment please follow this steps:
Enable "Secure Communication (SSL)" toggle in the Aria Lifecycle Manager UI Settings/Logs section by navigating tohttps://{URL}/lcm/lcops/settings/logs)
Stop agent
Review the Configure Agent SSL parameter guide and generate a proper certificate dedicated for the Aria Operations for Logs instance and set it in the ssl_ca_path property in the liagent.ini (i.e. ./var/lib/loginsight-agent/liagent.ini)
Turn on ssl config in liagent.ini, see here for details.