Configuring Integration Service to Infrastructure Management server communication to enable TLS 1.2
The following sections describe the configuration steps for both the local Integration Service and remote Integration Service in TLS 1.2 mode. Perform the configuration steps based on the type of Integration Service installed:
- Step 1: To configure the local Integration Service
- Step 2: To configure the remote Integration Service
- Step 3: Start the servers
To configure the local Integration Service
Stop the Infrastructure Management Server by running the following command:
pw system stop
Using a text editor, open pronet.conf file located in <Infrastructure Management Server Install directory>\pw\custom\conf directory.
Comment out the instance of the code line having the conntype value as
tcp
as shown in the following code block:#pronet.apps.agent.conntype=tcp
Set the conntype value to
ssltcp
as shown in the following code block:#Configuration settings to make the Infrastructure Management Server to Local Integration Service TLS 1.2 compliant pronet.apps.agent.conntype=ssltcp
Note
Modify the file present in the pw\custom\conf directory, if it is a local Integration Service.
Save and close the file.
To configure the remote Integration Service
Stop the Infrastructure Management Server by running the following command:
pw system stop
Using a text editor, open pronet.conf file located in <Infrastructure Management Server Install directory>\pw\custom\conf directory.
Comment out the instance of the code line having the conntype value as
tcp
as shown in the following code block:#pronet.apps.agent.conntype=tcp
Set the conntype value to
ssltcp
as shown in the following code block:pronet.apps.agent.conntype=ssltcp
Save and close the file.
Logon to the computer where the remote Integration Service is installed, and stop the Integration Service (Unix) by running the following command:
pw is stop
To stop the Integration Service (Microsoft Windows), navigate to Start > Settings > Control Panel.
- Double-click the Services icon to launch the Services dialog box.
- Locate the BMC TrueSight Infrastructure Management Integration Service on the list of services, highlight, then click Stop.
Click Yes to close the warning message that is displayed.
The status for the Integration Service changes from Started to (blank).
Using a text editor, open pronet.conf file located in <Integration Service Install directory>\agent\pronto\conf directory.
Comment out the instance of the code line having the conntype value as
tcp
as shown in the following code block:#pronet.apps.agent.conntype=tcp
Set the conntype value to
ssltcp
as shown in the following code block:pronet.apps.agent.conntype=ssltcp
Note
Modify the file present in the agent\pronto\conf directory, if it is a remote Integration Service.
Save and close the file.
Start the servers
Perform the following set of steps after the configuration changes are completed.
To edit the Integration Service's properties
- Logonto the TrueSight console, and access Configuration > Managed Devices. Managed Devices page displays the BMC TrueSight Infrastructure Management components that are displayed in a hierarchical order as shown in the following diagram.
- Click the action menu of the Integration Service for which the TLS configurations need to be applied. When the Integration Service is in the disconnected state, the action menu displays the options: Edit, Delete, View, Connect.
- Select the Edit option.
- The Integration Service properties are displayed. Set the Connection to Infrastructure Management Server property to Direct access using SSL TCP/IP.
- Click Save.
Start the Infrastructure Management Server by running the following command:
pw system start
Start the Integration Service (Unix) by running the following command:
pw is start
To start the Integration Service (Microsoft Windows), navigate to Start > Settings > Control Panel.
- Double-click the Services icon to launch the Services dialog box.
- Locate the BMC TrueSight Infrastructure Management Integration Service on the list of services, highlight, then click Restart.
Click Yes to close the warning message that is displayed.
The status for the Integration Service changes to Started from (blank).Note
The Integration Service restart is applicable only to the remote Integration Service. The local Integration Service is restarted automatically along with the Infrastructure Management Server.
Where to go from here
For more information about how to configure other communication channels to enable TLS 1.2, see Configuring TrueSight Infrastructure Management to enable TLS 1.2.
Comments
Log in or register to comment.