Adding and editing an SSL Certificate monitor

This monitor checks a specific location for the existence of a valid SSL certificate. The monitor reports as down if the URL cannot be resolved, if the location cannot be accessed, or in cases where the monitor is configured to use the URL or the IP address of the configured interface, an SSL certificate is not found at all.

Note: This feature is available with WhatsUp Gold Premium, ProView, TotalView, and TotalView Plus Editions only. To update your license, visit the WhatsUp Customer Portal.

To add a new SSL Certificate active monitor:

1. From the WhatsUp Gold web interface, go to Admin > Monitors. The Monitor Library dialog appears.
2. Click the Active tab. The Active Monitor list appears.
3. Click New. The Select Active Monitor Type dialog appears.
4. Select SSL Certificate Monitor, then click OK. The Add SSL Certificate Monitor dialog appears.
5. Enter the appropriate information:
   • Name. Enter a unique name for the active monitor. This name displays in the Active Monitor Library.
   • Description. Enter additional information about the monitor. This description displays next to the monitor in the Active Monitor Library.
6. Select the method by which the monitor should locate the SSL certificate:
   • Check certificate by URL. Enter the URL where the monitor should look for a certificate. The URL must begin with a proper URI, such as http:// or https://. Additionally, this field supports appending the URL with a custom port number.  Port 443 is used by default, however, you can specify an alternate port number as well. For example, to use Port 8081, use the following format: https://www.<domain>.com:8081.
   • Check certificate by file. Enter the shared network location of the certificate in UNC format. The monitor searches for and uses credentials tied to the target device. The device must have valid Windows credentials and you must have proper permissions to access the network share as configured.

   Note: Both methods support the percent variables %device.hostname and %device.address.

7. Enable the following additional configuration options, if desired:
   • Down if certificate expires in the next X days. Specify the number of days for the monitor to consider. The monitor reports the target device as down if the SSL certificate is set to expire within the number of days entered.
   • Check certificate usage (verifies the Common Name matches the URL domain). Select this option to configure the monitor to check that the common name on the SSL certificate matches the domain on the URL.
8. Enable and configure the following additional proxy settings, if desired:
   • Proxy server. Enter the address of the required proxy server if needed to access the configured URL. This option is not valid for Path to File.
   • Proxy port. Enter the port on which the proxy server listens.
   • Proxy username. If required, enter the username for the proxy server.
   • Proxy password. Enter the password that coincides with the username for the proxy server.
   • Timeout (seconds). Enter the length of time WhatsUp Gold attempts to connect. When the time you enter is exceeded without connecting, a timeout occurs and WhatsUp Gold stops trying to connect. This is considered a failed connection. This option is not valid for Path to File.
9. Check Use in Rescan to have the monitor appear in the Active Monitor list on the Device Properties dialog. WhatsUp Gold adds the monitor type to the device during a rescan, which is launched using the Rescan button on the Device Properties dialog, if the protocol or service is active on the device.

   Important: The Use in Rescan control only applies if the %device.address or %device.hostname percent variable is used in the either the Check certificate by URL or Check certificate by file configuration fields.

10. Click OK to save changes.

To edit an existing SSL Certificate active monitor:

1. From the WhatsUp Gold web interface, go to Admin > Monitors. The Monitor Library dialog appears.
2. Click the Active tab. The Active Monitor list appears.
3. Select the target SSL Certificate monitor.
4. Click Edit. The Edit SSL Certificate Monitor dialog appears.
5. Modify the configuration settings described previously as needed.
6. Click OK to save changes.

See Also Using Premium active monitors Adding and editing an APC UPS Monitor Monitoring mail servers Monitoring Microsoft Exchange 2003 servers Monitoring a Microsoft Exchange Server Adding and editing a Fan Monitor Adding and editing a File Content monitor Adding and editing a File Properties monitor Adding and editing a Folder Monitor Adding and editing an FTP Monitor Adding and editing an HTTP Content Monitor Adding and editing a JMX active monitor Adding and editing a Network Statistics Monitor Adding and editing a PowerShell active monitor Adding and editing a Printer Monitor Adding and editing a Process Monitor Adding and editing a SQL Query active monitor Adding and editing a SQL Server 2000 monitor Adding and editing a Temperature Monitor Adding and editing a VoIP Monitor Adding and editing a WMI Formatted active monitor Adding and Editing a WMI Monitor Assigning active monitors Removing and deleting active monitors About critical active monitors Group and Device active monitor reports