ControlUp On-Premise – Secure Solve Communication

Release date: November 21st 2023

Welcome to my ControlUp section. Here I will show how I exported the ControlUp Solve JSON Web Token file. This file is used when connecting the On-Premises ControlUp Monitor to Solve.

ControlUp’s documentation COP Security enhancement for Monitor/SOP communication, describes the feature as follows:

• Several private keys are created when you create a new SOP appliance.
  Each SOP appliance generates dedicated unique keys that are only valid for the appliance they are generated on.
• The keys are stored in a file on the SOP server machine and must be imported to the COP server.
• The keys are used to create dedicated JWT tokens to apply when connecting to Solve.
• Without a valid import, you can’t access Solve.

Once the Solve Appliance is deployed and started up, I connect with WinSCP using the cuadmin-user and download the json-file which is located here: /opt/sib_volumes/sop-cert

I store the json-file to be used when I install my On-Premises ControlUp Server, posted here: ControlUp On-Premise – Install ControlUp Server

ControlUp On-Premises setup:

1. Solve
   • Export  JSON Web Token File
   • Replace Solve Self-Signed Certificate
2. Insights
   • Replace Insights Self-Signed Certificate
   • Configure LDAPS Integration
3. ControlUp Server
4. Real-Time Console
   • Define Credentials
   • Connect VMware vCenter
   • Connect VMware Horizon
5. Monitor
6. IOP Forwarder
7. Agent (Silent)
8. RemoteDX

Official ControlUp documentation:

• Welcome to Solve
• COP Security enhancement for Monitor/SOP communication
• ControlUp Architecture – On-Premises

Other miscellaneous Tips & Tricks

Disclaimer: Every tips/tricks/posting I have published here, is tried and tested in different it-solutions. It is not guaranteed to work everywhere, but is meant as a tip for other users out there. Remember, Google is your friend and don’t be afraid to steal with pride! Feel free to comment below as needed.