Client certificates - v12.98 & W2019 server

david.matthewson · Post by **david.matthewson** » Mon Sep 20, 2021 5:44 am

Hi Alex

I'm having problems getting client certs to work so I can check a server site protected by client certs..

I've imported the cert into the local machine store/personal of the server running HM and edited the hostmon.ini file to match. But when I use the pulldown to select the cert I don't see it but do see other ones.

Using mmc.exe I can see the cc in the machine 'persona' store. Is this the correct location? Does the cert import need to be in any particular format?

Thanks

David

KS-Soft · Post by **KS-Soft** » Mon Sep 20, 2021 6:15 am

HostMonitor started as application? service?
I assume question relates to URL test method?
Why you modified hostmon.ini file? What exactly parameter changed?

Regards
Alex

david.matthewson · Post by **david.matthewson** » Mon Sep 20, 2021 6:45 am

Alex

Thanks for the prompt reply.

1) HM started as a service under LocalSystem

2) sorry, yes, this is the 'advanced' mode of the url test.

3) hostmon.ini - as per this thread - https://www.ks-soft.net/cgi-bin/phpBB/v ... rtificates

"Also, if you installed certificate into local computer certificate store, then you should add the UseLocalCertStore=1 line into [Misc] section of the hostmon.ini file and restart HostMonitor.
Or may be you already using this option while certificate is installed in user's certificate store? Then you should remove this line from hostmon.ini file or replace it with UseLocalCertStore=0"

This parameter does indeed change if I see or do not see any certs - I have installed the certs under local machine not user.

Many thanks

David

KS-Soft · Post by **KS-Soft** » Mon Sep 20, 2021 7:38 am

Yes, you need this option in this case but usually its not a good idea to run HostMonitor service under Local System account - HostMonitor will not be able to check remote Windows systems using CPU Usage, Process, Service, Registry, NT Event Log tests, etc.
Normally you should provide local or domain account using Windows Services applet. In this case you install certificate for the same user account and you don't need to modify hostmon.ini file.

This parameter does indeed change if I see or do not see any certs - I have installed the certs under local machine not user.

We cannot reproduce the problem.
May be you did not restart HostMonitor service after hostmon.ini modification?

Regards
Alex

david.matthewson · Post by **david.matthewson** » Mon Sep 20, 2021 8:23 am

Thanks Alex - much appreciated. I'll dig a bit more.