Search for	Example	Results
A single word	`cat`	Topics that contain the word "cat". You will also find its grammatical variations, such as "cats".
A phrase. You can specify that the search results contain a specific phrase.	`"cat food"` (quotation marks)	Topics that contain the literal phrase "cat food" and all its grammatical variations. Without the quotation marks, the query is equivalent to specifying an OR operator, which finds topics with one of the individual words instead of the phrase.

Search for	Operator	Example
Two or more words in the same topic	`AND` `and` `+` (plus symbol) `&` (ampersand)	`cat AND dog` `"cat food"+milk` `"cat food"&"dog food"`
Either word in a topic	`OR` `or` `\|` (pipe)	`cat OR dog` `cat \| dog`
Topics that do not contain a specific word or phrase	`NOT` `not` `!` (exclamation point)	`NOT cat` `! dog`
Topics that contain one string and do not contain another	`^` (caret)	`cat ^ mouse`
A combination of search types	`( )` parentheses	`cat + (dog \| mouse)` `cat \| dog + (! mouse)`

Configuration Management System (CMS)2018.08

Use > Hardening > Data Flow Probe Hardening > Create a New Self-Signed Certificate for Two-Way SSL in Agent Driven Inventory Discovery

Create a New Self-Signed Certificate for Two-Way SSL in Agent Driven Inventory Discovery

This task describes how to create a new self-signed certificate for two-way SSL in Agent Driven Inventory Discovery.

Important Make sure you follow the instructions below to replace the hard coded certificates. Otherwise the hard coded certificates would be used.

To do so,

On one of the probes, go to the <DataFlowProbe_Home>\conf\security folder and run the following commands:

Create a private key and a public certificate of UD Agent and store them to the Agent Keystore agent.keystore.

<DataFlowProbe_Home>\bin\jre\bin\keytool.exe -genkey -alias smartagent -keyalg RSA -sigalg SHA256withRSA -keysize 2048 -keystore agent.keystore -dname "CN=<Common_Name>,OU=<...>,O=<...>,L=<...>,ST=<...>,C=<...>" -storepass logomania

Convert the keystore format to PKCS12.

<DataFlowProbe_Home>\bin\jre\bin\keytool.exe -importkeystore -srckeystore agent.keystore -destkeystore agentkeystore.p12 -deststoretype PKCS12 -storepass logomania

Extract the private key adikey.pem and the public certificate adicert.pem from the Agent Keystore using OpenSSL.

openssl pkcs12 -in agentkeystore.p12 -nodes -nocerts -out adikey.pem -passin pass:logomania

openssl pkcs12 -in agentkeystore.p12 -nodes -nokeys  -out adicert.pem -passin pass:logomania

Import the Agent public certificate adicert.pem you extracted from the first probe to Data Flow Probe Truststore on all probes.
1. Clean the truststore from the hard coded certificates using this command:
```
<DataFlowProbe_Home>\bin\jre\bin\keytool.exe -delete -alias smartagent -keystore ProbeTrustStore.jks -storepass logomania
```
2. Import the Agent public certificate adicert.pem to the probe truststore.
```
<DataFlowProbe_Home>\bin\jre\bin\keytool.exe -import -v -keystore ProbeTrustStore.jks -file adicert.pem -alias smartagent -storepass logomania
```
3. Repeat steps 2a and 2b on all other probes.
Go back to the first probe, create a temporary empty folder, and then create the discoveryResources folder inside it, copy adikey.pem and adicert.pem into the discoveryResources folder, and then create a ZIP package file out of the temporary folder.
Import this package to UCMDB through Administration > Package Manager.
Restart the data flow probe Windows service on all probe servers.
Run the Install UD Agent job to deploy the agent with the new certificates.

If the agent is already deployed, it needs to be uninstalled (using the Uninstall UD Agent) job first.

When using the management zone mode, the agents can be uninstalled and installed using the infrastructure discovery activity.

Related information

How to Deploy a Package

Send Help Center feedback