Securing the Windows Agent with SSL

Communication between the up.time monitoring station and the up.time Windows Agent can be secured by enabling SSL encryption. Enabling SSL is a two-step process:

• Enabling SSL on the Windows Agent System
• Enabling SSL in the up.time Web Interface

Enabling SSL on the Windows Agent System

To enable SSL encryption, complete the following steps on each agent system:

NOTE: Do not perform these steps on the monitoring station.

1. Download and install the Windows version of stunnel 4.27.
2. Find the file stunnel.conf on the agent system. This file is normally found in C:\Program Files\stunnel.
3. Add the following lines to the bottom of stunnel.conf and save the file. This will enable SSL encryption on local port 9997 and forward the encrypted data to the standard agent port (9998).

   [up.time agent] 
   accept = 9997
   connect = 9998
   

   For older agents, use these lines:

    
   [up.time NT agent]
   accept = 9997
   connect = 9998
   

   NOTE: You can change the port on which to enable SSL to any value. To change the default agent port to a port other than 9998, edit the agent port setting in the Windows Registry (see Changing the Windows Agent Port) and then configure the stunnel.conf file to accept on port 9998 and to connect to the port that you configured for the agent.



4. Start stunnel from the Start menu or by running the following command at the command prompt:

   C:\Program Files\stunnelstunnel.exe -start

   The agent is now SSL enabled on port 9997.

Enabling SSL in the up.time Web Interface

If the Windows agent has already been added to up.time, complete the following steps in the up.time Web interface for each agent system that requires SSL.

1. Click My Enterprise.
2. Click the name of the agent system for which you want to enable SSL.
3. Click Edit Performance Monitor.
4. In the new window, select the Use SSL (HTTPS) option and change the Agent Port Number to 9997.
5. Click Save.

If you have not yet added the agent system to up.time, follow the steps in the up.time User Guide. When adding the agent system, ensure that the Agent Port Number option is set to 9997 and that the Use SSL option is enabled.