Please Help with adding Logger Appliance to ArcMC 2.0

[hpgbrice1]

I get en error message each time i try to add logger to ArcMC

error: "

ArcSight Management Center failed to download a certificate from host

000.000.000.000.

Error: Certificate does not match Hostname/IP or cannot be imported.

[rkent1]

Hi Gilbert,

I assume you have scrubbed the error message png attached and that 000.000.000.000 represents the actual IP address of the Logger, correct?

What I'd recommend is to add the Logger to your ArcMC's hosts file, then when you add the Logger, instead of putting in the logger IP address, you put the hostname (the hostname that matches the certificate of the logger). Unless you have the Logger's hostname in your network's dns, in which case, skip adding it to the hosts file.

[bobbie.lu.turne]

I have the exact issue, adding to the host file does not resolve it.

any additional ideas on how to troubleshoot?

[rkent1]

Does you error message also look like:

error: "
ArcSight Management Center failed to download a certificate from host
000.000.000.000.  <- Is this an IP address or a hostname for you?

It should be matching whatever is in the actual cert on the logger, whether that's an IP address or a hostname.

To figure that out, open up a browser, and go to: https://<logger_ip_or_hostname>, and have a look at the certificate. For example, here's what I see for the certificate of Protect724:

Can you make sure that when you add the Logger, you are using exactly the text that you see in the orange area of your logger's cert above?

Next, in your ArcMC, if you do not have this hostname in your DNS, add a mapping of that hostname to the logger's IP address into the ArcMC's hosts file.

[bobbie.lu.turne]

The certificate says Issued to:  Appliance

I have added the hostname to the hostfile and dns is configured properly.

How do I change 'Appliance' to the real logger name?

[hpgbrice1]

I was able to have it accept the certificate, but now I get i new error message.

Failed to add host

Error: Host credentials are invalid.

I am not sure what credentials it wants me to use. I am currently using the default admin credentials for Logger.

[hpgbrice1]

Go to System Admin -> network, and make sure your hostname is the full FQDN name. If it's not, update it, save change and try again.

[steve-m]

What version of Logger? What version of ArcMC?

HP ArcSight Management Center 2.0 Patch 2 (2.0 P2) is a maintenance release that

resolves all issues listed under “Fixed Issues” on page 12. In addition, it includes the most

recent hotfixes released by HP ArcSight, as well as support for management of Logger 6.0

and 6.0 P1.

[hpgbrice1]

Logger Appliance version 6.0.0.7285.0

ArcMC Appliance Version 2.0.0.1337.0

[bobbie.lu.turne]

ArcMC version = 2.0.0.1398.2 and Logger version = 6.0.0.7307.1

The FQDN under System Admin -> network is the name of the logger fqdn, not the name 'Appliance' as noted above in the certificate. 

[rkent1]

Great news Gilbert, glad you're now past that hurdle. Yes, should be the admin creds, but Steve's questions below are now the next hurdle, as you do have to be on the required versions.

[bobbie.lu.turne]

I able to resolve the certificate with the name of "appliance' by System Admin ->SSL Server Certificate -> Generate Certificate with Hostname   where Hostname = fqdn

by using the admin login to the gui + password and connector_user and the password, I was able to make this work.

Thank you!

[hpgbrice1]

I still get an error message guys.

has anyone seen this before?

"Error: com.arcsight.product.arcmc.service.v1.api.AuthenticationException;

nested exception is: org.apache.avro.AvroRuntimeException:

com.arcsight.product.arcmc.service.v1.api.AuthenticationException"

[rkent1]

Hi Gilbert,

Looking at the versions you're on, you may need to patch. Are you in a position to do that first? , are you able to share which Logger/ArcMC version you were on?

[bobbie.lu.turne]

ArcMC version = 2.0.0.1398.2 and Logger version = 6.0.0.7307.1