Solve provides two different ways to administer the Solve on-premises (SOP) server. Before you can apply changes to your configuration, make sure that you already have an SOP server installed. If you don't have an SOP server in your environment, install the server first. This is explained in the Solve On-Premises Installation - Version 8.5 guide. Once installed, you can start the configuration of the SOP server.
You can choose between the administration from the command-line interface or the graphical user interface (Solve UI), which you can access from your web browser. We explain the administration options from both interfaces in the upcoming sections.
This guide includes:
- Administration via Command Line
- Administration via Solve UI
- Stop Ignoring SSL Errors
You can make use of the various administration scripts that help you to manage your SOP server. In this article, we will explain how to use these scripts. In our example, we will use “sib_server” as our SOP server name and cuadmin as the default user that we chose during the OVF deployment.
Backing up the SOP database is one of the most important administration actions that you should perform regularly. For this purpose, you can use a backup script that lets you back up all configuration and data stored in the Solve database.
To backup your SOP database:
- Open Putty and create an SSH connection to your SOP server.
- Enter the user credentials for the appliance user.
- The command line is ready.
- Change the directory to /opt/scripts and see if there is a backup.sh file.
- Make the backup.sh executable by using this command, confirm by entering your password.
sudo chmod +x backup.sh
- Run the backup.sh script.
- The backup file backup.tar is saved to the /opt directory. Change to this directory.
- You can now transfer the file via SCP to your local computer.
Note: When you perform another backup, the old backup.tar will be overwritten. Make sure that you save the files to a different folder.
The procedure for restoring a database is as straightforward as the backup process. The restore.sh script is used to restore an existing backup.
To restore the database:
- Copy the backup file that you want to restore into the /opt folder on your SOP server. If your backup file is stored on a Windows machine, the easiest way to copy the file is by using SCP, for example:
scp backup.tar email@example.com:/opt:
- Create an SSH connection to the SOP server as described in steps 1-3 from the Backup of SOP database section. Navigate to the /opt folder and check if the backup.tar that you just copied exists.
- Go to the /opt/scripts directory. Here you can find the restore.sh.
- Make the restore.sh executable by using the command below, confirm by entering your password.
sudo chmod +x restore.sh
- Run the restore.sh script.
Traffic between the web browser and the SOP server is open and can be intercepted. You can and should use certificates for an encrypted connection to the Solve user interface. SOP provides self-signed certificates that can be found on the SOP server in the /opt/sib_volumes/Solve-proxy/ssl directory.
To update a certificate:
- Copy the server.crt and server.key from your local computer to the /opt/sib_volumes/Solve-proxy/ssl directory.
- Create an SSH connection to the SOP server as described in steps 1-3 from the Backup of SOP database section. Go to the /opt/scripts directory and check if the user-cert-update.sh script exists.
- Make the user-cert-update.sh executable by using the command below, confirm by entering your password.
sudo chmod +x user-cert-update.sh
- Run the user-cert-update.sh script.
Besides the command-line scripts, the SOLVE UI that is accessed from the web browser provides additional administration settings.
The SOP GUI allows you to perform a range of actions:
This option is not available in the on-premises installation.
Click Backup to download a backup file (backup.tar) to your local machine. This backup includes the SOP settings and customization settings of your Solve machine.
- Click Upload Files and choose the backup file from our local computer.
- Click Apply to save the changes and import the configuration file to the SOP server.
For troubleshooting problems with Solve components or connections, it is often useful to have log files available. Press the Export Log Files button to save and compress log files to your local machine. Send an email with the logs attached to our Support team at firstname.lastname@example.org.
This option allows you to export a previously imported signed certificate so it can be used on a new SOP machine. The exported certificate will only work when the new SOP machine has the same hostname as the one you exported the certificate from.
Click Export Certificate to download the currently used certificate files to your local machine.
- To import a certificate, click Upload Certificate to browse the client for the .crt and .key certificate files.
Both files are required so you need to mark both files and click Open.
- When the files are located, click Apply. You will see the popup as shown below.
Note: While the certificates are being imported, Solve will not be available.
Under Session idle timeout, you are able to set the time in minutes after which your Solve session will be disconnected. Hit Apply to save the changes.
SOP comes with a self-signed certificate out of the box that, by default, is not trusted by the ControlUp Monitor. This certificate is used for the communication between the ControlUp Monitor, the web browser, and the SOP server and to access the Solve URL.
When you update a certificate, the ControlUp Monitors must be configured to use this updated certificate. Follow the instructions below to enforce the updated certificate and to stop ignoring SSL errors.
To configure the Monitor's SSL behavior:
- Open the ControlUp Real-Time Console. Select the Solve tab and click Manage Monitors.
- In the Settings screen, click Monitors Settings. This opens the configuration screen for the ControlUp Monitors.
- From the left menu, click Solve Settings.
- Uncheck the Ignore SSL Certificate Errors checkbox, and click OK to apply the settings.
If Solve becomes unavailable after you changed the settings, check any trust issues between the ControlUp Monitors and the new SOP certificate.