To view the latest 11.3.x version, see  PATROL Agent 11.3.02 .

Configuring the PATROL Agent to enable TLS 1.2

By default, the PATROL Agent communicates using either Transmission Control Protocol (TCP) or Secure Sockets Layer (SSL) protocol. You can configure PATROL Agents to enable TLS 1.2 mode. 

The following process workflow guides you to configure the PATROL Agent to Integration Service communication to be TLS compliant:


  1. Ensure that the signed certificates are generated for the Integration Service and imported into the PATROL Agent's client DB certificate store.
    To generate signed certificates for the Integration Service, see Implementing private certificates in the Integration Service .

  2. Ensure that the PATROL Agent and the TrueSight Integration Service are running at the same security level.
  3. Configure the PATROL Agent to Integration Service communication to enable TLS mode.
    • Run the set_unset_tls command in the PATROL Agent
    • Run the set_unset_tls_is command in the Integration Service
      For details, see Configuring the PATROL Agent to Integration Service communication to enable TLS 1.2 .

  4. Update the PATROL Agent's registry files.
    For details, see Updating the PATROL Agent registry files.

  5. Update the Integration Service's registry files.
    For details, see Updating the Integration Service registry files.

Where to go from here

Administering

Was this page helpful? Yes No Submitting... Thank you

Comments

  1. Thurlow Caffey

    Diagram on this page is not displaying; please fix.

    Apr 07, 2020 06:52
    1. Rashmi Gokhale

      Hi,

      Thanks for this feedback.

      I have fixed the image and published the page.

      Thanks,

      Rashmi

      Apr 08, 2020 01:35
  2. Thurlow Caffey

    For steps 4 & 5, you should state that these steps only apply to systems running Microsoft Windows OS. It becomes obvious as one read's into the pages, after clicking links, but makes things easier on the reader to begin with.

    Apr 21, 2020 05:41
    1. Rashmi Gokhale

      Hi,

      Thanks for the feedback.

      I will confirm with the SME and update the topic.


      Apr 22, 2020 06:33
      1. Rashmi Gokhale

        Hi,

        I discussed this with the SME. As there are instructions for Windows and Unix, this topic is applicable to both. I have slightly modified the content structure on the Updating the PATROL Agent registry files page. I have separated the instructions for Windows and Unix so that it is easy to locate.

        Thanks,

        Rashmi


        May 04, 2020 08:04