Enable TLSv1

Puppet Enterprise — 2019.1
This version is out of date. For current versions, see Puppet Enterprise support lifecycle.
Sections

TLSv1 and TLSv1.1 are disabled by default in PE.

You must enable TLSv1 to install agents on these platforms:

  • AIX

  • CentOS 5

  • RHEL 5

  • SLES 11

  • Solaris 10

  • Windows Server 2008r2

To comply with security regulations, PE 2019.1 and later uses only version 1.2 of the Transport Layer Security (TLS) protocol.

  1. In the console, click Classification > PE Infrastructure.
  2. On the Configuration tab, in the Data area, add the following class, parameter, and value:
    Class Parameter Value
    puppet_enterprise::master::puppetserver ssl_protocols ["TLSv1", "TLSv1.1", "TLSv1.2"]
  3. Click Add data, and commit changes.
  4. Run Puppet on the master.
See an issue? Please file a JIRA ticket in our [DOCUMENTATION] project
Puppet sites use proprietary and third-party cookies. By using our sites, you agree to our cookie policy.