SolarWinds Knowledge Base

The Orion NCM integration component encrypts your sensitive data with a security certificate stored on the original Orion NPM server. To grant the additional web console access to this encrypted data:

1. Export the Orion NCM Integration Engine certificate file from the Orion NPM server.
2. Import the certificate file to the Orion NPM additional web console.
3. (Windows Server 2003) Grant the ASPNET and NETWORK SERVICE objects read, write, and execute permissions to the imported certificate file.
4. (Windows Server 2008) Grant NETWORK SERVICE read, write, and execute permissions to the imported certificate file.

Export the Orion NCM Integration Engine certificate from the Orion NPM server.

1. On the Start Menu, click Run, type MMC, and then click OK.
2. On the File menu, click Add/Remove Snapin, and then click Add.
3. Select Certificates, and then click Add.
4. Select Computer account, and then click Next.
5. Select Local computer, and then click Finish.
6. Click Close.
7. Click OK.
8. Expand the Certificates (Local Computer) group.
9. Expand the Personal group.
10. Expand the Certificates group.
11. Right-click Orion NCM Integration Engine, point to All Tasks on the shortcut menu, and then click Export.
12. Click Next in the Certificate Export Wizard.
13. Select Yes, export the private key, click Next, and then click Next again.
14. Type and confirm a password for this private key, and then click Next.
15. Specify the file name to which you want to save the certificate, click Next, and then click Finish—the certificate is saved with a .pfx file name extension.

Import the certificate file to the Orion NPM additional web console.

1. Copy the .pfx certificate file to the computer running the Orion NPM additional web console.
2. On the Start Menu, click Run, type MMC, and then click OK.
3. On the File menu, click Add/Remove Snapin, and then click Add.
4. Select Certificates, and then click Add.
5. Select Computer account, and then click Next.
6. Select Local computer, and then click Finish.
7. Click Close.
8. Click OK.
9. Expand the Certificates (Local Computer) group.
10. Expand the Personal group.
11. Expand the Certificates group.
12. If there is an Orion NCM Integration Engine item in the list, right-click Orion NCM Integration Engine, and then click Delete on the shortcut menu.
13. Right-click the Certificates—Personal—Certificates node, point to All Tasks in the shortcut menu, and then click Import.
14. Click Next in the Certificate Import Wizard.
15. Specify the .pfx certificate file you copied to the server, and then click Next.
16. Enter the password for the private key, check Mark this key as exportable, and then click Next.
17. Select Place all certificates in the following store, and then select Personal as the Certificate Store.
18. Click Next, and then click Finish.

(Windows Server 2003) Grant the ASPNET and NETWORK SERVICE objects read, write, and execute permissions to the imported certificate file.

1. In Windows Explorer, navigate to the folder C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys.
2. Click View on the Windows Explorer menu, and then select Details.
3. Right-click the file with the most recent Date Modified time, and then select Properties.
4. Click the Security tab.
5. Click Add.
6. Type ASPNET in the Enter the object names to select field, and then click OK.
7. Select ASPN.NET Machine Account.
8. Check Allow for Read & Execute, Read, and Write.
9. Click Add.
10. Type NETWORK SERVICE in the Enter the object names to select field, and then click OK.
11. Select NETWORK SERVICE.
12. Check Allow for Read & Execute, Read, and Write.
13. Click OK.
14. Run the SolarWinds Configuration Wizard.

(Windows Server 2008) Grant the NETWORK SERVICE object read, write, and execute permissions to the imported certificate file.

1. In Windows Explorer, right click the folder C:\Users.
2. Click Properties.
3. Click Edit under Group or user names, then click Continue.
4. Click Add.
5. Type NETWORK SERVICE in the Enter the object names to select box.
6. Click OK.
7. Click NETWORK SERVICE in the Group or user names list.
8. Click Read & Execute, Read, and Write, then click Apply.
9. Click OK.
10. Run the SolarWinds Configuration Wizard.