How to use LDAPS in Trellix Insights

Technical Articles ID: KB91211
Last Modified: 2022-09-23 10:47:00 Etc/GMT

Environment

Database Activity Monitoring 4.x
Database Vulnerability Manager 4.x
Trellix Insights 6.x

Summary

Support for LDAPS in Trellix Insights differs from Database Security Server. Trellix Insights doesn't accept all certificates as valid. Instead, it currently requires an administrator to add their certificate to the Java keystore.

Problem

When you configure Trellix Insights to connect to an LDAP server over LDAPS, authentication fails with the following error:

Unauthenticated.

Cause

Trellix Insights doesn't trust self-signed certificates. This behavior differs from the Database Security Server and you must manually add the certificates to the Java keystore.

Solution

To manually add the certificates to the Java keystore:

Export your LDAP server's certificate in X.509 format as a .cer file.

NOTE: Instructions for exporting the certificate might differ between LDAP servers.
Import the certificate:
- Windows:
  1. Stop the Trellix Insights service.
  2. Open a command prompt with elevated rights:
    Right-click the Command Prompt shortcut and click Run as administrator.
  3. In the command-line session, change directory to C:\Program Files\Mcafee\SNG\jre\bin\.
  4. Type the following command, but replace pathToCERFile with the path to the .cer file, and then press Enter:
    
    keytool -importcert -alias myLDAPCert -keystore "C:\Program Files\Mcafee\SNG\jre\lib\security\cacerts" -storepass changeit -file pathToCERFile
  5. Start the Trellix Insights service.
- Linux:
  1. Stop the insights-server service.
  2. Change directory to /usr/local/insights-server/jre/bin/.
    
    NOTE: You might need root rights to change to this directory.
  3. Type the following command, but replace pathToCERFile with the path to the .cer file, and then press Enter:
    
    keytool -importcert -alias myLDAPCert -keystore "/usr/local/insights-server/jre/lib/security/cacerts" -storepass changeit -file pathToCERFile
  4. Start the insights-server service.

Related Information

We're investigating mitigation strategies to be included in a future release of Trellix Insights.

Affected Products

Languages:

This article is available in the following languages:

Knowledge Center

How to use LDAPS in Trellix Insights

Environment

Summary

Problem

Cause

Solution

Related Information

Affected Products

Languages:

Title

Title

Knowledge Center

How to use LDAPS in Trellix Insights

Environment

Summary

Problem

Cause

Solution

Related Information

Affected Products

Languages:

Choose your region

Title

Title