Open topic with navigation

Authenticating Peers

Authentication happens only once, at the time the peer relationship is created. The authorization to use peer services is implicit each time a remote system receives peer requests from a system that previously authenticated as a peer.

You can authenticate a peer in one of two ways:

• Peer Authorization ID and Code: These credentials are generated on one Manager or Logger and used on another to configure peering between the two. When generating the Authorization ID and Code, enter the IP address of the Manager or Logger you will use to initiate peering in the Peer Authorization page of the one you want to peer with. The IP address is used to generate a unique ID and code that can be used only for peering from that address. Therefore, this method is more secure than using a user name and password.

  Note: Micro Focus ArcSight recommends using Peer Authorization ID and Code for authentication.

• User name and password: A user name and password already configured on the target system is used for authentication.

Selecting a Peer Authentication Method

• When using a user name and password to configure peering, you must use the user password for local authentication, even if your system is configured to use LDAP or RADIUS authentication.
• If the peer Manager or Logger is configured for SSL Client authentication (CAC), you must configure an Authorization ID and Code on the target Manager or Logger. You cannot use a user name and password.
• FIPS-enabled systems are not limited to a specific authentication method.

Authorizing a Peer

Use the following procedure to generate the Authorization ID and Code on the target Manager or Logger with which you want to establish a peer relationship. (Manager or Logger B in the example in Peer Nodes.) After that, use the ID and Code on the initiating Manager or Logger when configuring the peer relationship (Manager Logger A in that example).

To generate the Authorization ID and Code to use when configuring a peer relationship:

1. Open the Configuration > Advanced menu and click Peer Authorizations.
2. Click Add.
3. Enter the hostname or IP address and port for the Manager or Logger you want to peer with this system.

4. Click Save.

   The authorization ID and authorization code display. Copy this information and use it on the other Manager or Logger when adding this system as a peer.

5. Click Done to return to the Peer Authorization list.