Retour
-
Titre
How to force Linux agent to use TLS 1.2 and disable other protocols -
Description
Due to security, vulnerability and compliance concerns with Rapid Recovery, some of them described here KB 230703, there is a need to enforce the Linux agent service to use TLS 1.2 protocol and disable other protocols, for example, SSLv3, TLS 1.0 and TLS 1.1.
-
Résolution
1. On the agent server stop Rapid Recovery agent service
systemctl stop rapidrecovery-agent
2. Open agent service configuration file using your favorite text editor
vi /opt/apprecovery/agent/Agent.Service.Mono.exe.config
3. Locate key="securityProtocol" under <appSettings> and change value to Tls12
<add key="securityProtocol" value="Tls12" />
4. Save configuration file
5. Start Rapid Recovery agent service
systemctl stop rapidrecovery-agent
NOTE: During the agent upgrade process this file will most likely be overwritten, therefore these changes will have to applied once again after upgrading.