Enable TLSv1

TLSv1 and TLSv1.1 are disabled by default in PE.

You must enable TLSv1 to install agents on these platforms:
  • AIX
  • Solaris 11

To comply with security regulations, PE 2019.1 and later uses only version 1.2 of the Transport Layer Security (TLS) protocol.

  1. In the console, click Node groups > PE Infrastructure.
  2. On the Configuration data tab, add the following class, parameter, and value:
    Class Parameter Value
    puppet_enterprise::master::puppetserver ssl_protocols ["TLSv1", "TLSv1.1", "TLSv1.2"]
  3. Click Add data, and commit changes.
  4. Run Puppet on the primary server and any compilers.