Observability
How to download the PFX file for the SolarWinds Orion certificate.
When users want to download the Orion certificate for authentication, they might need the Certificate in a PFX file. So, this article helps in downloading the certificate in PFX format.
First published date
Last published date
Overview
This article helps to download the PFX file for the SolarWinds Orion Certificates, which were located in the MMC.
Product section
Resolution
Please note that the SolarWinds Orion certificate is typically installed in the Windows Certificate Store on the SolarWinds poller server.
- To locate and export the certificate:
- Open MMC (Microsoft Management Console) on the SolarWinds poller server.
- Add the Certificates snap-in for the Local Computer account.
- Navigate to Personal > Certificates.
- Look for a certificate issued to or by SolarWinds Orion (often named with "SolarWinds" or "Orion").
- Right-click the certificate, select All Tasks > Export.
- Use the Certificate Export Wizard to export the certificate with the private key as a .pfx file.
- The exported PFX can then be imported or used by external systems or scripts that require secure authentication.
Additionally, note that SolarWinds does not recommend using the certificate externally.
Possible risks in using the certificate externally:
- Exporting and using the SolarWinds Orion certificate outside the poller environment can expose the private key if not handled securely.
- If the certificate is compromised, it could allow unauthorised access to SolarWinds APIs or encrypted communications.
- Storing the PFX in less secure environments (e.g., pipeline servers, shared repositories) increases risk.
Additional/Bonus information :
- Avoid using the SolarWinds Orion certificate externally unless absolutely necessary.
- Instead, consider using API tokens or service accounts with scoped permissions for automation.
- If the certificate must be used, ensure it is stored securely (e.g., in a secure vault or key management system) and access is tightly controlled.
- Rotate certificates regularly and audit usage.
- SolarWinds documentation generally recommends using dedicated service accounts or API keys for automation rather than exporting internal certificates.