Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Securing your Wazuh installation API section is changing every password #8054

Open
wants to merge 2 commits into
base: 4.3
Choose a base branch
from
Open

Securing your Wazuh installation API section is changing every password #8054

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
c8bc4f5
Refined the command in the installation guide to enhance clarity and …
guidomodarelli Dec 18, 2024
8e76794
Cleaned up whitespace inconsistencies in the Wazuh dashboard installa…
guidomodarelli Dec 18, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
74 changes: 37 additions & 37 deletions source/installation-guide/wazuh-dashboard/step-by-step.rst
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
.. Copyright (C) 2015, Wazuh, Inc.

.. meta::
:description: Learn how to install Wazuh dashboard, a flexible and intuitive web interface for mining and visualizing the events and archives.
:description: Learn how to install Wazuh dashboard, a flexible and intuitive web interface for mining and visualizing the events and archives.

.. _wazuh_dashboard_step_by_step:

Expand All @@ -27,21 +27,21 @@ Adding the Wazuh repository
If you are installing the Wazuh dashboard on the same host as the Wazuh indexer or the Wazuh server, you may skip these steps as you may have added the Wazuh repository already.

.. tabs::

.. group-tab:: Yum


.. include:: /_templates/installations/common/yum/add-repository.rst



.. group-tab:: APT


.. include:: /_templates/installations/common/deb/add-repository.rst




Installing the Wazuh dashboard
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
Expand Down Expand Up @@ -100,14 +100,14 @@ Starting the Wazuh dashboard service

.. include:: /_templates/installations/dashboard/enable_dashboard.rst

**Only for distributed deployments**

**Only for distributed deployments**

Edit the ``/usr/share/wazuh-dashboard/data/wazuh/config/wazuh.yml`` file and replace the ``url`` value with the IP address or hostname of the Wazuh server master node.

.. code-block:: yaml
:emphasize-lines: 3

hosts:
- default:
url: https://localhost
Expand All @@ -123,14 +123,14 @@ Starting the Wazuh dashboard service
- **Username**: *admin*
- **Password**: *admin*

When you access the Wazuh dashboard for the first time, the browser shows a warning message stating that the certificate was not issued by a trusted authority. An exception can be added in the advanced options of the web browser. For increased security, the ``root-ca.pem`` file previously generated can be imported to the certificate manager of the browser. Alternatively, a certificate from a trusted authority can be configured.
When you access the Wazuh dashboard for the first time, the browser shows a warning message stating that the certificate was not issued by a trusted authority. An exception can be added in the advanced options of the web browser. For increased security, the ``root-ca.pem`` file previously generated can be imported to the certificate manager of the browser. Alternatively, a certificate from a trusted authority can be configured.


Securing your Wazuh installation
--------------------------------


You have now installed and configured all the Wazuh central components. We recommend changing the default credentials to protect your infrastructure from possible attacks.
You have now installed and configured all the Wazuh central components. We recommend changing the default credentials to protect your infrastructure from possible attacks.

Select your deployment type and follow the instructions to change the default passwords for both the Wazuh API and the Wazuh indexer users.

Expand All @@ -140,14 +140,14 @@ Select your deployment type and follow the instructions to change the default pa
.. group-tab:: All-in-one deployment

#. Use the Wazuh passwords tool to change all the internal users' passwords.

.. code-block:: console

# /usr/share/wazuh-indexer/plugins/opensearch-security/tools/wazuh-passwords-tool.sh --change-all --admin-user wazuh --admin-password wazuh

.. code-block:: console
:class: output

INFO: The password for user admin is yWOzmNA.?Aoc+rQfDBcF71KZp?1xd7IO
INFO: The password for user kibanaserver is nUa+66zY.eDF*2rRl5GKdgLxvgYQA+wo
INFO: The password for user kibanaro is 0jHq.4i*VAgclnqFiXvZ5gtQq1D5LCcL
Expand All @@ -158,16 +158,16 @@ Select your deployment type and follow the instructions to change the default pa
INFO: The password for Wazuh API user wazuh is JYWz5Zdb3Yq+uOzOPyUU4oat0n60VmWI
INFO: The password for Wazuh API user wazuh-wui is +fLddaCiZePxh24*?jC0nyNmgMGCKE+2
INFO: Updated wazuh-wui user password in wazuh dashboard. Remember to restart the service.


.. group-tab:: Distributed deployment

#. On `any Wazuh indexer node`, use the Wazuh passwords tool to change the passwords of the Wazuh indexer users.
#. On `any Wazuh indexer node`, use the Wazuh passwords tool to change the passwords of the Wazuh indexer users.

.. code-block:: console

# /usr/share/wazuh-indexer/plugins/opensearch-security/tools/wazuh-passwords-tool.sh --change-all

.. code-block:: console
:class: output

Expand All @@ -183,18 +183,18 @@ Select your deployment type and follow the instructions to change the default pa
#. On your `Wazuh server master node`, download the Wazuh passwords tool and use it to change the passwords of the Wazuh API users.

.. code-block:: console

# curl -sO https://packages.wazuh.com/|WAZUH_CURRENT_MINOR|/wazuh-passwords-tool.sh
# bash wazuh-passwords-tool.sh --change-all --admin-user wazuh --admin-password wazuh
# bash wazuh-passwords-tool.sh --admin-user wazuh --admin-password wazuh

.. code-block:: console
:class: output

INFO: The password for Wazuh API user wazuh is ivLOfmj7.jL6*7Ev?UJoFjrkGy9t6Je.
INFO: The password for Wazuh API user wazuh-wui is fL+f?sFRPEv5pYRE559rqy9b6G4Z5pVi

#. On `all your Wazuh server nodes`, run the following command to update the `admin` password in the Filebeat keystore. Replace ``<admin-password>`` with the random password generated in the first step.

.. code-block:: console

# echo <admin-password> | filebeat keystore add password --stdin --force
Expand All @@ -204,7 +204,7 @@ Select your deployment type and follow the instructions to change the default pa
.. include:: /_templates/common/restart_filebeat.rst

.. note:: Repeat steps 3 and 4 on `every Wazuh server node`.

#. On your `Wazuh dashboard node`, run the following command to update the `kibanaserver` password in the Wazuh dashboard keystore. Replace ``<kibanaserver-password>`` with the random password generated in the first step.

.. code-block:: console
Expand All @@ -215,7 +215,7 @@ Select your deployment type and follow the instructions to change the default pa

.. code-block:: yaml
:emphasize-lines: 6

hosts:
- default:
url: https://localhost
Expand Down Expand Up @@ -254,7 +254,7 @@ All the Wazuh central components are successfully installed and secured.

</a>
</div>

<div class="link-boxes-item past-step">
<a class="link-boxes-link" href="../wazuh-server/index.html">
<p class="link-boxes-label">Install the Wazuh server</p>
Expand All @@ -267,15 +267,15 @@ All the Wazuh central components are successfully installed and secured.

</a>
</div>

<div class="link-boxes-item past-step">
<a class="link-boxes-link" href="index.html">
<p class="link-boxes-label">Install the Wazuh dashboard</p>

.. image:: ../../images/installation/Dashboard-Circle.png
:align: center
:height: 61px

.. raw:: html

</a>
Expand Down
Loading