Monitoring

The Monitoring tab and subtabs allow you to configure monitoring for the Hardware Appliance.

Syslog

Use this tab to configure interactions with external monitoring systems. Here you can specify a syslog server to which the syslog of Hardware Appliance should be sent. The syslog of the Hardware Appliance contains the syslog of all internal systems as well as the EJBCA audit log. The syslog will be shipped by UDP in unencrypted, unsigned traffic.

You have the following options:

Syslog target IP addresses:
Enter the IP address of the syslog server.

Add:
Select Add to add the syslog server with the specified IP address.

Simple Network Management Protocol

Use this tab to activate and configure Simple Network Management Protocol (SNMP) access to the Hardware Appliance. SNMP allows an external monitoring system to query the state (health) of the Hardware Appliance.

Your options in this tab depend on your selection for SNMP version:

SNMP Version:

Disabled:
Disables the SNMP daemon.

SNMPv2:
Enables SNMP with Community string authentication. You will see the SNMPv2 options.

SNMPv3:
Enables SNMP with various authentication options, including password and encryption. You will see the SNMPv3 options.
Note that SNMP v3 does not support traps.

SNMPv2 options:

Credentials:

Community:
The Community string for SNMP v2 authentication is mandatory. It must match the following rules:

• length 4 and max. length 128 characters
• Valid characters:
  • Lower case letters [a-z]
  • Upper case letters [A-Z]
  • Digits [0-9]
  • Minus sign: -
  • Underscore sign: _

SNMPv3 options:

SNMP v3 offers the following authentication options:

• Username only
• Username and Password
• Username, Password, and Encryption.

The minimum requirement for authentication is Username. Combining it with Password and Encryption increases security.

Authentication:

Username:
The Username for SNMP v3 authentication is mandatory. It must match the same rules as the Community string for SNMPv2.

Method:
Supported authentication methods are None, SHA-1 and MD5.

Password:
The Password is mandatory for the authentication methods SHA-1 and MD5. It must match the following rules:

• length 8 and max. length 64 characters
• Valid characters:
  • ASCII characters only
  • No double quotation marks: “

Encryption:

Method:
Supported encryption methods are None, AES, and DES.

Secret:
The Secret is mandatory for the encryption methods AES and DES. It must match the same rules as the Password.

Apply:
Select Apply to confirm your changes and enable/disable SNMP access.

Overview of SNMP Object Identifiers (OIDs)

All SNMP requests are combined in the public community. The Hardware Appliance will answer to the two standards MIBS SNMPv2-MIB and HOST-RESOURCES-MIB.
Additionally, the following parameters can be accessed with the following OIDs:

Alternatively, all OIDs can be reached by the following snmpwalk commands. Replace the IP address in each command with the one of your system:

# for the standard group
snmpwalk -v2c -On -c public 192.168.5.162
# for the system group
snmpwalk -v2c -On -c public 192.168.5.162 .1.3.6.1.4.1.22408.1.1.2.1
# for the HSM group
snmpwalk -v2c -On -c public 192.168.5.162 .1.3.6.1.4.1.22408.1.1.2.2