Using SSL for interagent communication
If you would like to use SSL for interagent communication you must activate this option for all components, that is, during the master (step 16) and relay installations explained in this topic, for the console and for the agent rollout in the respective topics. The console provides an exception, because the SSL option cannot only be chosen during the installation process, it can also be activated or deactivated when you log on to the console. A note makes you aware of this at the appropriate paragraph in this documentation.
The following options are available for SSL communication:
Parameter | Description |
|---|---|
No | With this option the agent accepts both securized and non-securized communication, however it sends only non-securized communications. |
Receive Both, Securised Send | This value indicates that the agent accepts both securized and non-securized communication, however it sends only securized communications. |
Yes | When this option is selected the agent only communicates in secure mode, that is, it only receives and sends securized communication. |
To install the master agent with SSL
To install the master agent with SSL, proceed as follows:
- At step 16, make the following additional selection:
In HTTP Port Configuration dialog box, make your choice from the Securized Send, Receive Both list box. Then proceed with step 17 as defined for the rest of the procedure.
To install the relay agent with SSL
To install the relay agent with SSL, proceed as follows:
- At step 16, make the following additional selection:
In the Agent Configuration dialog box, make your choice from the Securized Send, Receive Both box. Then proceed with step 17 as defined for the rest of the procedure.
Important
Ensure to back up the certificates stored on the master. If the master is reinstalled, before its first restart, it is important to copy the saved certificates to the reserved location. The impact of the loss of master's certificates is a total loss of inter-agent communication in the SSL mode.
Comments
Log in or register to comment.