Enable TLSv1

Sections

TLSv1 and TLSv1.1 are disabled by default in PE.

You must enable TLSv1 to install agents on these platforms:
  • AIX

  • CentOS 5

  • RHEL 5

  • SLES 11

  • Solaris 10, 11

  • Windows Server 2008 R2

To comply with security regulations, PE 2019.1 and later uses only version 1.2 of the Transport Layer Security (TLS) protocol.

  1. In the console, click Node groups > PE Infrastructure.
  2. On the Configuration data tab, add the following class, parameter, and value:
    Class Parameter Value
    puppet_enterprise::master::puppetserver ssl_protocols ["TLSv1", "TLSv1.1", "TLSv1.2"]
  3. Click Add data, and commit changes.
  4. Run Puppet on the master and any compilers.
How helpful was this page?

If you leave us your email, we may contact you regarding your feedback. For more information on how Puppet uses your personal information, see our privacy policy.

Puppet sites use proprietary and third-party cookies. By using our sites, you agree to our cookie policy.