Refresh or Replace the Vulnerability Reporter SSL Certificate

Required User Role: Administrator

To update the self-signed SSL certificate used to upload vulnerability reports to Tenable.sc, do one of the following:

• Rotate the self-signed SSL certificate, replacing it with a fresh self-signed certificate.

• Replace the self-signed SSL certificate packaged with LCE with an SSL certificate from your organization.

To rotate the self-signed SSL certificate and replace it with a fresh self-signed certificate:

1. Log in to LCE via the command line interface (CLI).

2. In the CLI in LCE, run the following command to refresh the SSL certificate:

   /opt/lce/tools/lce_crypto_utils --generate-creds-vulnReporter -q

   LCE regenerates the SSL certificate locally.

3. Re-add the LCE to Tenable.sc, as described in Add a Log Correlation Engine Server in the Tenable.sc User Guide.

To replace the SSL certificate used to upload vulnerability reports to Tenable.sc:

1. Copy the following files from your CA to /opt/lce/reporter/ssl/.
   • cacert.pem
   • servercert.pem
   • cakey.pem

   • serverkey.pem

     Note: Do not change the certificate file names.

2. Add the LCE to Tenable.sc, as described in Add a Log Correlation Engine Server in the Tenable.sc User Guide.