Opsview - Enable TLS 1.2 and disable older TLS versions

In Opsview version 6.6.6 and above, you can enable TLS 1.2 and disable older TLS versions by editing the agent configuration file on the host running the agent.

Prerequisites

• None

Process

1. Log in to the host running the agent.
2. Open the /opt/opsview/agent/etc/nrpe.cfg file in your preferred text editor.
3. Change the protocols=... line to:

protocols=TLSv1_2:!SSLv2:!SSLv3:!TLSv1:!TLSv1_1

This enables TLS 1.2 and disables SSL 2, SSL 3, TLS 1 and TLS 1.1. 4. Restart the opsview-agent service:

systemctl restart opsview-agent

Windows agent

Only TLS 1.2 is enabled by default in the latest versions of the Windows agent.