• HOME
  • ACADEMY
  • DOCS
CONTACT US DOWNLOAD DATASTAX Download DataStax
DataStax Logo
  • GLOSSARY
  • SUPPORT
  • DATASTAX BLOG
  • DRIVERS
  • world icon
DSE OpsCenter 6.7 User Guide (Latest version)
  • About OpsCenter
  • Release notes
  • Installing OpsCenter
  • Upgrading OpsCenter
  • OpsCenter recommended settings
  • Configuring OpsCenter
  • Using OpsCenter
  • OpsCenter 6.7 Reference
  • DSE Management Services
  • Troubleshooting OpsCenter
  • Lifecycle Manager
  • OpsCenter API reference for developers
  • Home
  • Academy
  • Docs home
  • Contact us
  • Download DataStax
  • Glossary
  • Support
  • Developer blogs
Search tips

Search other guides

  1. Home
  2. Configuring OpsCenter

    Configure security features, alerts, failover, and much more in OpsCenter.

  3. OpsCenter Security

    Security configuration options and instructions.

  4. OpsCenter SSL overview

    Summary of available SSL configurations for OpsCenter.

  • Configuring OpsCenter

    Configure security features, alerts, failover, and much more in OpsCenter.

    • OpsCenter Security

      Security configuration options and instructions.

      • OpsCenter SSL overview

        Summary of available SSL configurations for OpsCenter.

        • Enabling HTTPS for the OpsCenter server

          Enable Hypertext Transfer Protocol Secure (HTTPS) support in OpsCenter and specify SSL information for better security.

        • Configuring SSL/TLS between OpsCenter and the DataStax Agents

          OpsCenter uses Transport Layer Security (TLS), referred to as its predecessor Secure Socket Layer (SSL), to encrypt the communication protocol and authenticate traffic between DataStax Agents and the main OpsCenter daemon opscenterd. SSL is disabled by default. Enabling SSL is strongly recommended.

        • Connect to DSE with client-to-node encryption in OpsCenter and the DataStax Agents

          Instructions for setting up OpsCenter and the DataStax Agents for connecting to DSE when client-to-node encryption is enabled.

        • Editing OpsCenter cluster connections for authentication or encryption

          Cluster connection settings define how OpsCenter connects to a DSE cluster. Edit the cluster connection settings if authentication or encryption has been enabled on a DSE cluster.

        • SSL configuration options for OpsCenter

          Reference of available configuration options for OpsCenter SSL in one convenient location.

      • Configuring OpsCenter role-based security

        OpsCenter allows enabling user authentication, defining custom roles, managing users, and designating permissions.

      • Encrypting sensitive configuration values

        Configuration encryption provides privacy and increased security for sensitive configuration values such as passwords.

      • Authenticating with LDAP

        OpsCenter supports LDAP authentication support for external LDAP services.

      • Kerberos authentication

        OpsCenter can use Kerberos to authenticate to DataStax Enterprise clusters. Understanding Kerberos principal formatting is crucial for successfully configuring OpsCenter to use Kerberos authentication.

      • Configuring security logging

        Configure comprehensive security logging in logback.xml that records user activity within OpsCenter.

    • Configuring alerts for events

      Configure email alerts, post alerts to a URL, or enable SNMP traps for integrations with enterprise reporting systems.

    • Configuring data collection and expiration

      OpsCenter collects system and table metrics data for each node in a cluster.

    • OpsCenter DSE definitions files updates

      OpsCenter uses definition files to enable support for different versions of DataStax Enterprise without the need to upgrade the currently installed version of OpsCenter.

    • Automatic failover overview

      Automatic failover from the primary DSE OpsCenter instance to the backup OpsCenter instance provides high availability without any manual intervention or downtime.

    • Backing up critical configuration data

      Back up critical configuration data for OpsCenter and Lifecycle Manager.

    • Configuring named route linking

      Enable route URL deep linking within the UI, which allows URL navigating to locations within the OpsCenter UI web application.

    • Configuring the OpsCenter JVM

      Configure the JVM parameters for the OpsCenter JVM.

    • Configuring the DataStax Agent JVM

      Configure the JVM parameters for the DataStax Agent JVM.

    • Changing the replication strategy for the OpsCenter keyspace

      Using the NetworkTopologyStrategy replication is recommended for the OpsCenter keyspace when running OpsCenter in a multi-datacenter environment.

    • Configuration files for OpsCenter

      Configure capabilities by manually modifying the opscenterd.conf, cluster_name.conf, and address.yaml configuration files.

    • Customize scripts for starting and stopping DataStax Enterprise

      OpsCenter allows starting and stopping the DataStax Enterprise process on each node in a visual manner. Customize the startup or shutdown of a node using the provided example scripts.

    • Example configuration scenarios

      Example scenarios of OpsCenter deployments include configuring for multiple regions or very large clusters.

OpsCenter SSL overview

Summary of available SSL configurations for OpsCenter.

For increased security, configuring the following SSL for OpsCenter is a recommended best practice:
  • Configure SSL support for the OpsCenter web application
  • Configure SSL between OpsCenter and DataStax Agents
  • Configure SSL (client-to-node encryption) between OpsCenter, the DataStax Agents, and DataStax Enterprise (DSE)
  • Enabling HTTPS for the OpsCenter server
    Enable Hypertext Transfer Protocol Secure (HTTPS) support in OpsCenter and specify SSL information for better security.
  • Configuring SSL/TLS between OpsCenter and the DataStax Agents
    OpsCenter uses Transport Layer Security (TLS), referred to as its predecessor Secure Socket Layer (SSL), to encrypt the communication protocol and authenticate traffic between DataStax Agents and the main OpsCenter daemon opscenterd. SSL is disabled by default. Enabling SSL is strongly recommended.
  • Connect to DSE with client-to-node encryption in OpsCenter and the DataStax Agents
    Instructions for setting up OpsCenter and the DataStax Agents for connecting to DSE when client-to-node encryption is enabled.
  • Editing OpsCenter cluster connections for authentication or encryption
    Cluster connection settings define how OpsCenter connects to a DSE cluster. Edit the cluster connection settings if authentication or encryption has been enabled on a DSE cluster.
  • SSL configuration options for OpsCenter
    Reference of available configuration options for OpsCenter SSL in one convenient location.

© DataStax, Inc. All rights reserved. Updated: 2019-04-11

Build time: 2019-04-11 10:45:32.814

DataStax, Titan, and TitanDB are registered trademark of DataStax, Inc. and its subsidiaries in the United States and/or other countries.

Apache, Apache Cassandra, Cassandra, Apache Tomcat, Tomcat, Apache Lucene, Apache Solr, Apache Hadoop, Hadoop, Apache Spark, Spark, Apache TinkerPop, TinkerPop, Apache Kafka and Kafka are either registered trademarks or trademarks of the Apache Software Foundation or its subsidiaries in Canada, the United States and/or other countries.

Privacy policy | Terms of use