Configuring third-party SSL certificates

Wazuh supports the use of third-party SSL/TLS certificates for securing access to the Wazuh dashboard. Instead of using self-signed SSL certificates, organizations can use certificates issued by a trusted Certificate Authority (CA) to provide trusted HTTPS connections for dashboard users.

By default, the Wazuh dashboard serves a certificate that it issues from its own certificate authority (CA) during the Wazuh dashboard installation, unless you deploy your own certificate before installing it.

You can use third-party certificates instead of self-signed ones in the Wazuh dashboard. This guide includes instructions for creating and configuring Let's Encrypt certificates. Let's Encrypt is a nonprofit Certificate Authority (CA) providing free SSL/TLS certificates to millions of websites.

To generate this type of certificate, you need a fully qualified domain name (FQDN). Let's Encrypt verifies if you have control over the domain.

You can install the SSL certificate directly on the Wazuh dashboard. Alternatively, you can install it using NGINX, a third-party open source proxy software, to offload the SSL decryption processing from the Wazuh dashboard.

Choose a preferred method to start configuring the SSL/TLS certificate for the Wazuh dashboard: