App Control: How to Revert SSL Strong Mode/Certificate Verification When Enabled Accidentally
search cancel

App Control: How to Revert SSL Strong Mode/Certificate Verification When Enabled Accidentally

book

Article ID: 289295

calendar_today

Updated On:

Products

Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

Revert the changes made by accidentally enabling Certificate Verification/SSL Strong Mode.

Environment

  • App Control Server: All Supported Versions
  • App Control Agent: All Supported Versions
  • Certificate Verification/SSL Strong Mode enabled

Resolution

  1. Login to the Console and navigate to: https://ServerAddress/shepherd_config.php
  2. Find the Defined Property: SSLMode.
  3. Change the Property Value to: 1
  4. Click Change.

Any Agent that does not check in after making this change will require either:

  1. Exporting the current Server Certificate and importing it to the endpoint.
  2. Manually disabling the Agent's Certificate Verification setting via the command line:
cd "C:\Program Files (x86)\Bit9\Parity Agent"
dascli password GlobalCLIPassword
dascli sslmode 1