Certificates and the agent in the SolarWinds Platform

SolarWinds Platform Agent software certificate

The SolarWinds Platform Agent software is derived from the following root certificate authorities:

• Versions released in January 2026 and earlier: DigiCert Assured ID Root Certificate Authority (see DigiCert Trusted Root Authority Certificates)

• Versions released in February 2026 and later: Microsoft Identity Verification Root Certificate Authority 2020 (see Microsoft PKI Repository)

The root certificate authority must be trusted on the agent machine.

If your certificate is not valid:

1. Download the following certificate from DigiCert Trusted Root Authority Certificates (© 2021 DigiCert Inc., available at https://www.digicert.com/kb/digicert-root-certificates.htm, obtained on May 3, 2021.)

   DigiCert Assured ID Root CA

   SHA1 Fingerprint: 05:63:B8:63:0D:62:D7:5A:BB:C8:AB:1E:4B:DF:B5:A8:99:B2:4D:43

   SHA256 Fingerprint: 3E:90:99:B5:01:5E:8F:48:6C:00:BC:EA:9D:11:1E:E7:21:FA:BA:35:5A:89:BC:F1:DF:69:56:1E:3D:C6:32:5C

2. Install the certificate to the Local Computer\Trusted Root Certification Authority store on the server hosting the agent.

For more information, search for "Add the Certificates Snap-in to an MMC" at technet.microsoft.com.

SolarWinds Platform and SolarWinds Platform Agent certificates

SolarWinds Platform uses a certificate you can add in the Configuration Wizard. See Configure the SolarWinds Platform Web Console to use HTTPS.

When you install SolarWinds Platform Agents, the SolarWinds Platform generates a unique certificate for each agent. These certificates are signed by the SolarWinds-Orion certificate, which is automatically generated by the SolarWinds Platform during installation. The certificate is stored in the SolarWinds Platform database and in the SolarWinds Platform Agent. It is used for authentication and encryption of the communication between SolarWinds Platform and the agent.

Signing Linux/AIX SolarWinds Platform Agents

Linux/AIX installation packages (rpm/deb packages) and repositories (yum/zypper/apt repositories) are signed.

You might need to import the public GPG key manually to the computer where you have the Linux/AIX SolarWinds Platform Agent installed.

If you used the default path to install your SolarWinds Platform, the public keys for your Linux distribution are available on your main SolarWinds Platform server in the following folder(s): C:\Program Files\SolarWinds\Orion\AgentManagement\Installers\LinuxRepository\dists\<dist-name>\

Add trusted root certificates to the agent workstation

Select the procedure that matches your agent operating system.

CentOS

1. On the SolarWinds Platform server, save the SolarWinds Platform website certificate from your web browser.

2. On the agent workstation, add the SolarWinds Platform server IP address and hostname to /etc/hosts.

3. Install the ca-certificates package on the workstation.

   yum install ca-certificates

4. Enable the dynamic CA configuration feature.

   update-ca-trust force-enable

   If on CentOS7+, run this command:

   update-ca-trust enable

5. Add the certificate file to /etc/pki/ca-trust/source/anchors/.

   cp OrionWebConsoleCertificate.crt /etc/pki/ca-trust/source/anchors/

6. Run the following command:

   update-ca-trust extract

7. Append your trusted certificate to /etc/pki/tls/certs/ca-bundle.crt.

   cat OrionWebConsoleCertificate.crt >>/etc/pki/tls/certs/ca-bundle.crt

Ubuntu

1. On the SolarWinds Platform server, save the SolarWinds Platform website certificate from your web browser.

2. On the agent workstation, add the SolarWinds Platform server IP address and hostname to /etc/hosts.

3. Copy the certificate to the trusted certificates directory on the workstation:

   cp OrionWebConsoleCertificate.crt /usr/local/share/ca-certificates/

4. Update the certificates:

   update-ca-certificates