Migrate an integrator probe
Move an integrator to a new host or point it at a new webserver by generating a fresh self-signed certificate and re-registering it with the webserver.
Overview
The integrator migrates exactly like a monitor probe. The migrate command stops the integrator, discards its old certificate, generates a brand new self-signed certificate + private key, and pushes the new certificate to the webserver — authenticated with a webserver API token. Once the webserver reloads its certificate store, mutual TLS communication is restored.
The only differences with the monitor probe are the executable name (integrator) and the certificate file (config/ssl/certificates/integrator.pem). The steps are identical.
Prerequisites
- The webserver must be up, running and reachable from the integrator host (the integrator pings
https://<webserver>/pingfirst). - You need a valid webserver API token (JWT). Generate one from the webserver (
POST /api/auth) or from the webserver UI. - Run the command from the integrator install directory (where
integrator.exe/integratorand its config file live), with elevated privileges (the service is stopped/started).
Migration steps
1. Run the migration command
Execute the migration option with the webserver API endpoint and its token. The integrator stops the running service, deletes the old config/ssl/certificates/integrator.pem, generates a new self-signed certificate and matching private key, and shares the new certificate with the webserver.
# Windows
integrator.exe migrate <webserver_ip>:<webserver_api_port> <webserver_api_token>
# Linux
./integrator migrate <webserver_ip>:<webserver_api_port> <webserver_api_token>
On success you get:
=> SUCCESS: To enable communication between this component and the webserver, you need to update that component IP/port number and reload the webserver's certificates store.
config/ssl/certificates/integrator.pem from the integrator install directory.
2. Start the integrator component
The migrate command leaves the service stopped. Start it again.
# Windows
integrator.exe start
# Linux
./integrator start
3. Reload the webserver certificate store
Reload the webserver certificate folder so the new certificate is added to the webserver certificates store. Until this is done the webserver will not trust the integrator’s new certificate.
4. Update the probe IP and port
On the webserver, update (optionally) the integrator’s IP address and port number so the webserver reaches it at its new location, then save.
5. Verify communication
Check that communication between the webserver and the migrated integrator is OK.