Configuring the TrueSight Network Automation connector

TrueSight Network Automation connector is used to establish a connection between TrueSight Network Automation and the TrueSight Server Automation Application Server. Automation Console sends notifications for jobs such as running

vulnerability jobs to the connector, which sends it to the TrueSight Network Automation. The connector ensures that even if the application server is in an air-gapped environment, communication between Automation Console and the application server is uninterrupted. 

By default, the connector establishes a connection over the HTTPS protocol using out-of-the-box self-signed certificates. To ensure seamless communication, you must provide the connector information in the hosts file on TrueSight Network Automation server as mentioned below:

You create a service account [an user account used to retrieve necessary details from endpoint so that Automation Console can use it for processing] and specify the data refresh interval [set time interval after which Automation Console retrieves new details from endpoint] while configuring the connector. This service account is also used for change automation while obtaining approvals from BMC Remedy IT Service Management. 

Before you begin

Before running the connector, ensure that the connector is installed and run on Windows and Linux operating systems that match the following criteria:

• AdoptOpenJDK Runtime Environment 18.9 (build 11.0.19+7) is installed on the connector host. 

• Port requirement as below - 

  Port	Protocol	Source	Destination	Inbound /outbound
  443	HTTPS	Connector	TrueSight Network Automation	Outbound
  443	HTTPS	TrueSight Network Automation (web services port)	Connector	Inbound

Updating the TrueSight Network Automation connector for TrueSight Automation Console

When you install TrueSight Automation Console, the TrueSight Network Automation connector is already configured and running. From the briefcase menu, go to Connectors and the TrueSight Network Automation connector is shown as running. 

On the Connectors > Manage Connectors page do the following:

1. Click the  option against the TrueSight Network Automation connector and then click Edit.
   On the Update a Connector page, the TrueSight Network Automation server details, service account user details, and the data refresh interval is displayed. 
   By default, the time interval is 60 minutes. Minimum is 5 minutes and maximum is 10080 minutes.

2. Make changes as per your requirement and save the connector configuration. 
   After entering the password, click Save.

   Can I provide a different TrueSight Server Automation host details while editing the connector?

   Yes, in case of failure of the existing Application Server, you can specify another Application Server.

3. Click > Enable to run the connector with the new changes. 

Enabling debug mode

BMC recommends that you do not modify any other configuration files available in the /config directory. However, you can enable the debug mode on the connector to obtain detailed logging information.

Do this:

1. Press CTRL+C twice to stop the connector, if its already running

2. Go to <ConnectorLocation>/config, open the application.properties file, add the following parameter and set it to debug, save the file

   #
   #Logging related Properties
   #
   logging.level.com.bmc.dem.bna.connector=debug
3. Restart the connector.

To install the security certificate for the TrueSight Network Automation connector

In the older releases, the communication between TrueSight Automation Console and TrueSight Network Automation is not secured. Though the security certificate is present, it is not verified.

Starting with the 23.1 release, the communication between TrueSight Automation Console and TrueSight Network Automation is secured by default. The security certificate is verified based on the value of the tsna.ssl.check.ignore parameter.

• Verify the value of the tsna.ssl.check.ignore parameter in the application.properties file. By default, the value is false. This means, the communication is secured.
• If you do not want the communication to be secured, update the value of the tsna.ssl.check.ignore parameter to true. 

Perform the following steps to install the security certificate:

1. Open the TrueSight Network Automation portal URL in a browser.
2. Click Export. 
3. Save the certificate as a .crt file. While saving, rename the certificate as tsna.

4. Depending on your installation environment, copy the tsna.crt file to the following location: 

   Installation environment	Copy the tsna.crt file to
   Automation Console is deployed using Stack Manager	/opt/bmc/truesight/common/certs/
   Automation Console is deployed on Kubernetes clusters	/configs/external/certs
   BMC Helix Automation Console	Windows Connector VM Import the tsna.crt file manually using the following keytool command: ( ${JAVA_HOME}\keytool -import -keystore ${JAVA_HOME}\lib\security\cacerts -storepass changeit -noprompt -alias tsna -file tsna.crt)  Linux Connector VM run.sh takes care of importing tsna.crt file if its placed under /opt/certs folder.

5. Restart the TrueSight Network Automation connector.

Where to go next?

Log in to Automation Console with the appropriate credentials to successfully verify the connector installation. See Accessing-and-navigating-the-Automation-Console-interface.