Certificates

The Certificates view provides a central location in NXLog Platform for managing certificates that agents use to communicate securely with data sources and destinations. By synchronizing certificates through NXLog Platform you no longer need to manually maintain certificates files in each individual NXLog Agent instance.

Navigate to Agents > Certificates to access the page.

NXLog Platform Certificates view

Certificate authorities

The view shows the certificates grouped by their certificate authority, the trusted organization that issued the certificates.

NXLog Platform certificate authorities
Table 1. Certificate authority information explained
Column Description

Subject name (SN)

Primary identity of the certificate.

Subject alternative name (SANs)

Additional identities, other than the subject name, for which the certificate authority certificate is also valid.

Issued by

Attributes of the certificate authority that issued the certificate.

Issued to

Entity that will use the certificate.

Validity

Start and end date of the certificate authority certificate.

Certificates

By expanding a certificate authority you can view the certificates that are signed by the certificate authority.

NXLog Platform certificates
Table 2. Certificate table explained
Column Description

Status

Shows the certificate’s status. The possible states are:

Green - Valid

The certificate is correctly formatted and within its validity period.

Orange - Expiring soon

The certificate is currently valid but will expire soon. Update the certificate to maintain the secure communication.

Grey - Immature

The certificate is not yet valid because its validity period hasn’t started (the start date is in the future).

Red - Expired

The end date of the certificate has passed and it will no longer be accepted when validating a connection. Update the certificate with a valid certificate file to restore secure communication.

Black - Not synchronized

The certificate has been added to NXLog Platform, or updated, but has not been sent to agents with assigned configurations that use this certificate. Use the Update agents action to synchronize the certificate in the relevant agents.

Subject name (SN)

Primary identity of the certificate.

Issuer

Entity that verified and signed the certificate.

Subject alternative name (SANs)

Additional identities, other than the subject name, for which the certificate is also valid.

Start date

The earliest day on which the certificate is valid.

End date

The last day when the certificate is valid.

Expire in

Number of days remaining before the end date.

Used by

Number of agents with assigned configurations that use this certificate. You will not be able to delete a certificate that is used by agents, unless you replace it with another valid certificate.

Assigned to

Number of configurations that are currently using this certificate. You will not be able to delete a certificate that is used in a configuration, even if the configuration is not assigned to agents, unless you replace it with another valid certificate.

Key

Indicates if the certificate has a private key.

Actions

Certificate control functions. The possible options are:

View details

View the details of the certificate files. The detail view is also used to delete or update the certificate. For more information see Certificate details.

Update agents

Distribute the latest version of the certificate stored in NXLog Platform to agents using that certificate. This synchronization is required when a certificate is in use by agents and was updated in NXLog Platform.

Download PEM

Download a copy of the PEM file of the certificate.

Download key

Download a copy of the private key of the certificate.

Delete

Delete the certificate from NXLog Platform. You can only delete a certificate that is not in use by any configuration, unless you replace it with another valid certificate.

For more details on using these actions see Manage certificates.

Certificate details

Choose View details from the …​ dropdown menu to see the certificate details. You can also use this view to delete or update the certificate.

NXLog Platform certificate details
Table 3. Certificate and key details explained
Field Description

Assigned to

Number of configurations that are currently using this certificate. You will not be able to delete a certificate that is used in a configuration, even if the configuration is not assigned to agents, unless you replace it with another valid certificate.

Destination name

Usage description, used for context and filenames, defined when the certificate was added to NXLog Platform.

Used by

Number of agents with assigned configurations that use this certificate. You will not be able to delete a certificate that is used by agents, unless you replace it with another valid certificate.

Status

Shows the certificate’s status. The possible states are:

Green - Valid

The certificate is correctly formatted and within its validity period.

Orange - Expiring soon

The certificate is currently valid but will expire soon. Update the certificate to maintain the secure communication.

Grey - Immature

The certificate is not yet valid because its validity period hasn’t started (the start date is in the future).

Red - Expired

The end date of the certificate has passed and it will no longer be accepted when validating a connection. Update the certificate with a valid certificate file to restore secure communication.

Black - Not synchronized

The certificate has been added to NXLog Platform, or updated, but has not been sent to agents with assigned configurations that use this certificate. Use the Update agents action to synchronize the certificate in the relevant agents.

Filename

The certificate filename used locally by agents. The filename syntax starts with the certificate’s destination name.

Type

Type of file, such as certificate or private key.

Certificate authority (CA)

Primary identity of the certificate authority that issued the certificate.

Subject name (SN)

Primary identity of the certificate.

Serial number

Unique identifier assigned by the certificate authority.

Start date

The earliest day on which the certificate is valid.

End date

The last day when the certificate is valid.

Expires in

Number of days remaining before the end date.

Key algorithm

Cryptographic algorithm used in the private key.

Version

Version of the private key structure.