Using SSL for interagent communication

If you would like to use SSL for interagent communication you must activate this option for all components, that is, during the master (step 16) and relay installations explained in this topic, for the console and for the agent rollout in the respective topics. The console provides an exception, because the SSL option cannot only be chosen during the installation process, it can also be activated or deactivated when you log on to the console. A note makes you aware of this at the appropriate paragraph in this documentation.

Related topics

Installing-on-premises-on-Windows-and-installation-options

Installing-the-master-with-an-SQL-server-with-an-existing-user

Installing-the-master-with-an-SQL-Server-database-and-ODBC-connection

Configuring-SSL-for-BMC-Client-Management

The following options are available for SSL communication:

Parameter

Description

No

With this option the agent accepts both securized and non-securized communication, however it sends only non-securized communications.

Receive Both, Securised Send

This value indicates that the agent accepts both securized and non-securized communication, however it sends only securized communications.

Yes

When this option is selected the agent only communicates in secure mode, that is, it only receives and sends securized communication.

To install the master agent with SSL

To install the master agent with SSL, proceed as follows:

  • At step 16, make the following additional selection:
    In HTTP Port Configuration dialog box, make your choice from the Securized Send, Receive Both list box. Then proceed with step 17 as defined for the rest of the procedure.
    HTTPPortConfig2.png 

To install the relay agent with SSL

To install the relay agent with SSL, proceed as follows:

  • At step 16, make the following additional selection:
    In the Agent Configuration dialog box, make your choice from the Securized Send, Receive Both box. Then proceed with step 17 as defined for the rest of the procedure. 
    HTTPPortConfig.png

Important

Ensure to back up the certificates stored on the master. If the master is reinstalled, before its first restart, it is important to copy the saved certificates to the reserved location. The impact of the loss of master's certificates is a total loss of inter-agent communication in the SSL mode.

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*