rebuilt endpoint

[Derek Day]

If i have a system that has an ossec agent running, and the system needs to be rebuilt or replaced, using same name and addresses space etc, just a pc refresh. do i need to generate a new ID and client.keys on the server side or can i use the same id/client.keys that was previously created for the now out of production computer?

[dan (ddp)]

On Nov 8, 2016 9:53 AM, "Derek Day" <dday...@gmail.com> wrote:
>
> If i have a system that has an ossec agent running, and the system needs to be rebuilt or replaced, using same name and addresses space etc, just a pc refresh. do i need to generate a new ID and client.keys on the server side or can i use the same id/client.keys that was previously created for the now out of production computer?
>

You can use the same keys, IF you backup and restore the rids on the agent or reset that agent's rids on the ossec server.

> --
>
> ---
> You received this message because you are subscribed to the Google Groups "ossec-list" group.
> To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+...@googlegroups.com.
> For more options, visit https://groups.google.com/d/optout.