Enable TLSv1

Puppet Enterprise — 2019.1

This version is out of date. For current versions, see Puppet Enterprise support lifecycle.

TLSv1 and TLSv1.1 are disabled by default in PE.

You must enable TLSv1 to install agents on these platforms:

To comply with security regulations, PE 2019.1 and later uses only version 1.2 of the Transport Layer Security (TLS) protocol.

On the Configuration tab, in the Data area, add the following class, parameter, and value:


Class	Parameter	Value
`puppet_enterprise::master::puppetserver`	`ssl_protocols`	`["TLSv1", "TLSv1.1", "TLSv1.2"]`