Configuring ESA features on

Rotating Insight certificates

Mon, 01 Jan 0001 00:00:00 +0000

These steps are only applicable for the system-generated Protegrity certificate and keys. It is recommended to upload and update custom certificates on the ESA. For updating custom certificates, refer here.

If the ESA Protegrity certificates are rotated, then the Audit Store certificates must be rotated.

Updating the IP address of the ESA

Mon, 01 Jan 0001 00:00:00 +0000

Perform the steps on one system at a time if multiple ESAs must be updated.

Updating the IP address on the Primary ESA

Update the ESA configuration of the Primary ESA. This is the designated ESA that is used to log in for performing all configurations. It is also the ESA that is used to create and deploy policies.

Perform the following steps to refresh the configurations:

Recreate the Docker containers using the following steps.

Updating the domain name of the ESA

Mon, 01 Jan 0001 00:00:00 +0000

Updating the domain name on the Primary ESA

Update the configurations of the Primary ESA. This is the designated ESA that is used to log in for performing all configurations. It is also the ESA that is used to create and deploy policies.

Ensure that the domain name of the ESA has been updated.
In the hostname field, if special characters are to be used, then only hyphen (-) is supported.

Updating the hostname of the ESA

Mon, 01 Jan 0001 00:00:00 +0000

Updating the hostname on the Primary ESA

Update the configurations of the Primary ESA. This is the designated ESA that is used to log in for performing all configurations. It is also the ESA that is used to create and deploy policies.

Ensure that the hostname of the ESA has been updated.
In the hostname field, if special characters are to be used, then only hyphen (-) is supported.

Perform the steps on one system at a time if multiple ESAs must be updated.

Updating Insight custom certificates

Mon, 01 Jan 0001 00:00:00 +0000

These steps are only applicable for custom certificate and keys. For rotating Protegrity certificates, refer here.

For more information about Insight certificates, refer here.

Update custom certificates on the Audit Store cluster that has a single node in the cluster using the steps provided in Using custom certificates in Insight.

Removing an ESA from the Audit Store cluster

Mon, 01 Jan 0001 00:00:00 +0000

Before you begin:

If an external SIEM is configured, ensure that the machine is available and running.
Verify if the scheduler task jobs are enabled on the ESA using the following steps:
1. Log in to the ESA Web UI.
2. Navigate to System > Task Scheduler.
3. Verify whether the following tasks are enabled on the ESA.
  - Update Policy Status Dashboard
  - Update Protector Status Dashboard

Perform the following steps to remove the ESA node: