Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Next, modify the stunnel config file located at at

C:\Program Files\uptime software\Uptime agent\stunnel\config\stunnel.conf

using the following information:

...

Run stunnel as a service that comes up when Windows starts so when the Agent server is rebooted, that the connection is re-established once the Agent server is rebooted. Open a command prompt as administrator. Change directory to where an administrator, and then change the directory path to the stunnel config file that we edited in the first step lies.previous Stunnel configuration section, for example:

C:\users\robert>cd\Program Files\uptime software\Uptime agent\stunnel\config

Then execute from stunnel's bin folder:

stunnel –install (which lives in stunnel’s bin folder)

For example:like so

C:\Program Files\uptime software\Uptime agent\stunnel\config>..\bin\stunnel.exe –install

Now, open the services Services control panel , start (Start > run Run > services.msc), and find the stunnel service and start it. It will be set to automatic, but will is not be yet running just yet. After running , there is a good possibility your windows firewall will ask if it’s ok, so say yes to thisthe service, reply Yes if your Windows firewall asks for confirmation.

Monitoring station configuration

It will be necessary to modify Uptime’s In this step, you must modify the Uptime Infrastructure Monitor configuration to restrict secure agent communications to use the version and ciphers of SSL/TLS that you would like want to use. Run notepad Notepad as an administrator or (pro tip) use Notepad++. The file is located in Uptime’s install the Uptime Infrastructure Monitor installation directory, for example: C:\uptime or C:\Program Files\uptime software\uptime if you chose the default.

At the end of the file, add a section similar to thisthe following lines:

#Agent connection security stuff
clientSocketTlsVersion= TLSv1.2

This Note that this step is opposite from the agent Agent setup where you tell it specify what certificate versions NOT to use. For our this example, we’re we only going to allow TLS 1.2, the strongest encryption we offercurrently offered by IDERA.

After modifying Save the file , save it and you will need to restart after you make the modifications. Restart the uptime data collector service on the monitoring station to pick up the changes. Open the services control panel, start > run > services.msc, and locate “Uptime Data Collector”. Right click It and select restart. This might take several seconds to complete. If several minutes go by, you can open task manager and kill it, then manually start it.

...