Introduction

The Pulse 2 Inventory SSL proxy tool is a Windows service that:

• wraps OCS Inventory NG agent HTTP connection to HTTPS, thus allowing the inventory to be sent to the server in a secured SSL/TLS channel with peer certificate check
• starts an inventory according to the value of a registry key, which content is periodically checked.

This software is licensed under the terms of the GNU General Public License (GPL).

Setup

Please download and start the installer: pulse2-inventory-ssl-proxy.exe

1. Click next to pass the wizard welcome page
2. Don't change anything on the components to install list, and click next
3. Choose the destination folder of the program, and click next
4. On the global options page, enter the IP address of your inventory server (either OCS Inventory NG server, miniocs GLPI plugin, or Pulse 2 inventory server), and the TCP port (the default one we use is 9999). Let the "Enable SSL" check box selected to use SSL connection, and if you want the service to perform a periodical inventory job, set the "Enable polling" option. Click next.
5. If you selected the "Enable SSL" option, first you need to tell whether the service will check the validity of the inventory server certificate ("Verify peer certificate"), using the Certification Authority file you must specified on the same page. In this case you will also need to provide a certificate containing a private and public key, that will be use by the service to perform the initial SSL handshake. The default CA file and local certificate file we provide are not suitable for peer verification, but allow to create the SSL channel between the service and the inventory server. So don't use the "Verify peer certificate" option if you use the default certificates. Click next.
6. If you selected the "Enable polling" option, the "Poll time" parameters is the time in seconds between each try of the service to start an inventory. The inventory agent will be launched only if this registry key is set to "yes": HKEY_LOCAL_MACHINE\Software\Mandriva\Inventory\Client\do_inventory. If the service starts an inventory, it sets this registry key to "no" automatically. Click next.
7. The last step allows you to effectively start the installation. Keep the two check boxes selected to automatically start the service at computer boot, and to start the service at the end of the installation. Click install.
8. Once the installation process is done, click close

Test

To test the Pulse 2 inventory proxy SSL service, just start the inventory agent from the command line prompt:

cd C:\Program Files\OCS Inventory Agent
OCSInventory.exe /SERVER:127.0.0.1 /PNUM:9999

And check the inventory server logs for incoming inventory.

If polling is enabled, you can use this command line to set the registry key:

reg add "HKEY_LOCAL_MACHINE\Software\Mandriva\Inventory\Client" /v do_inventory /t REG_SZ /d yes

Silent setup

The following flags are available for silent installation with the setup.exe:

Inventory server IP address:
/SERVER="IP_ADDRESS" default="empty"

Inventory server port:
/PORT="PORT_NUMBER" default=999

Register as service:
/SVCREG=0|1 default=1

Start service after installation:
/SVCSTART=0|1 default=1

Automatic service start at boot:
/SVCAUTO=0|1 default=1

Enable SSL:
/SSL=0|1 default=1

SSL verify peer certificate:
/SSLVERIFYPEER=0|1 default=0

SSL certification authority file:
/SSLCACERT="file" default="cacert.pem"

SSL local certificate (public/private key) file:
/SSLLOCALCERT="file" default="privkey.pem"

Enable polling:
/POLL=0|1 default=0

Poll interval:
/POLLTIME="N SECONDS" default=600

Configuration file

The p2ipc.ini file is the service configuration file. This file is available in the service installation directory (C:\Program Files\Mandriva\Pulse2 Inventory SSL Proxy\p2ipc.ini).

Logs

The service records log messages by default in the application log of the the event viewer.