Configure Automation Agent for SSL¶
On this page
Legacy Automation Agent has been removed
This Agent has been updated from your self-managed legacy Automation Agent to the MongoDB Agent.
Cloud Manager supports SSL for encrypting the following connections made by Automation Agents:
- Connections between the Automation Agents and MongoDB instances.
- Connections between the Automation Agents and Cloud Manager.
Prerequisite¶
To configure the agent to use SSL, you must have a trusted CA certificate that signed the MongoDB instance’s certificate.
Procedures¶
Connections between Agent and MongoDB Instances¶
To use SSL for the Automation Agent’s connection to a MongoDB host, specify the host’s SSL settings when adding the host or by editing the host’s settings.
Note
Cloud Manager can manage TLS/SSL for you if you are using Automation for the deployment. With Automation, Cloud Manager prompts you for the certificates to use to connect to the deployment when you enable TLS/SSL and then configures the agents appropriately. To learn how to configure TLS/SSL, see Enable TLS for a Deployment.
Specify path to trusted CA certificate.¶
If your Cloud Manager deployment uses TLS, then you must configure the MongoDB Agent to use TLS. To configure the agent to use TLS, you must have a trusted Certificate Authority certificate that signed the MongoDB instance’s certificate.
In the agent’s install directory, edit the configuration file to set
httpsCAFile field to the path of a file containing one or
more certificates in PEM format.
- macOS
- Ubuntu/Debian
- RHEL/CentOS/SLES/AMZ
- Linux
Example
If you would use the following command to connect through the
mongo shell:
Then you would modify the configuration file, setting this key/value pair:
To learn more about these settings, see Cloud Manager SSL Settings.
Restart the agent.¶
Connections between Agent and Cloud Manager¶
Automation Agents connect to Cloud Manager using TLS/SSL.