Updating the Integration Service registry files

Once you run the set_unset_is command in the Integration Service to enable the TLS mode, perform the following steps to update the Integrations Service's registry files.

To update the PATROL Agent's identity information into the TrueSight Integration Service registry files

Once you create the signed certificates for the PATROL Agent and import them into the PATROL Agent client and server DB stores, perform the following sequence of steps to update PATROL Agent's details into the Integration Service's registry files.

1. Log on to the host computer where you have installed the PATROL Agent, and have generated the certificates and certificate stores.

2. Navigate to the <ROOT_INSTALL_DIR>\common\security\bin_v3.0\Windows-x86-64\nss directory location and list the contents of the PatrolAsServer_DB certificate store by running the following command: 

   certutil-L -d sql:PatrolAsServer_DB

   This command displays the PATROL Agent's identity information as shown in the following figure: 

3. Log on to the host computer where the TrueSight Integration Service is installed.

4. Perform the following sequence of steps to update the identity information in the Integration Service:

   • Microsoft Windows

     1. Go to Start > Run and type regedit. The registry editor dialog box is displayed as shown the following figure:

     2. Navigate to the HKEY_LOCAL_MACHINE\SOFTWARE\BMC Software\IntegrationService\SecurityPolicy_v3.0\C_Program_Files_BMC_Software_TSIMAgent_Agent_bppmpis\server directory location, and update the value of server parameter with the PATROL Agent's identity information as shown in the following figure: 
   • Unix

     1. Navigate to the /etc/patrol.d/<Integration Service Install Directory>/security_policy_v3.0 directory location.

     2. Using a text editor open the bppmpis.plc file.

     3. Locate the identity parameter and assign the PATROL Agent's identity information to this parameter. An example for the same is shown in the following code block: 

To update the PATROL Agent's encoded password information into the TrueSight Integration Service registry files

The default password for the PatrolAsServer_DB is password. If you change this default password, then edit the Integration Service registry files to update the changed password’s encoded value.

1. Log on to the host computer where you have installed the PATROL Agent, and have generated the certificates and certificate stores.

2. Navigate to the <ROOT_INSTALL_DIR>\common\security\bin_v3.0\Windows-x86-64 directory location and execute the bmcryptpw.exe command as shown in the following example code. This command prompts you to type the password for the PATROL Agent's client DB store. 

   bmcryptpw.exe -m <ROOT_INSTALL_DIR>\common\security\keys\sample.bin –e

   

3. Log on to the host computer where the TrueSight Integration Service is installed.

4. Perform the following sequence of steps to update the PATROL Agent's encoded password information in the Integration Service:

   • Microsoft Windows
     1. Go to Start > Run and type regedit. The registry editor dialog box is displayed as shown the following figure: 

     2. Navigate to the HKEY_LOCAL_MACHINE\SOFTWARE\BMC Software\IntegrationService\SecurityPolicy_v3.0\PROXY\server directory location, and update the value of password parameter with the PATROL Agent's encoded password information as shown in the following figure: 

        Update only the encoded password information, and keep the special character comma and the text sample.bin unchanged.

   • Unix

     1. Navigate to the /etc/patrol.d/<Integration Service Install Directory>/security_policy_v3.0 directory location.

     2. Using a text editor open the bppmpis.plc file.

     3. Locate the password parameter and assign the PATROL Agent's encoded password information to this parameter. An example for the same is shown in the following code block: 

5. Restart the Integration Service.

Where to go from here

Configuring the PATROL Agent to enable TLS 1.2