App Control: How to Revert SSL Strong Mode/Certificate Verification When Enabled Accidentally

[#1]

Environment

• App Control Server: All Supported Versions
• App Control Agent: All Supported Versions
• Certificate Verification/SSL Strong Mode enabled

Objective

Revert the changes made by accidentally enabling Certificate Verification/SSL Strong Mode.

Resolution

1. Login to the Console and navigate to: https://ServerAddress/shepherd_config.php
2. Find the Defined Property: SSLMode.
3. Change the Property Value to: 1
4. Click Change.

Any Agent that does not check in after making this change will require either:

1. Exporting the current Server Certificate and importing it to the endpoint.
2. Manually disabling the Agent's Certificate Verification setting via the command line:

cd "C:\Program Files (x86)\Bit9\Parity Agent"
dascli password GlobalCLIPassword
dascli sslmode 1

Related Content

App Control: What is Certificate Verification?
App Control: How to Export and Import a Self-Signed Certificate for Disconnected Devices
App Control: What is the difference between a CA certificate and a Self-Signed certificate?
App Control: How to Replace Server Certificate in Version 8.x and Higher