13.1.9. Procedure – Configuring SSL handshake parameters

With the SSL handshake settings (SSL) parameter the certificate verification parameter and other handshake-related information can be set.

1. Select verification level in the Verify depths field to decide how many levels are verified in the certificate hierarchy.

   Values from 0 to 100 are allowed.

2. Choose Groups or Advanced with the radio buttons.

   Note
   You are recommended to use the PKI groups configuration.

   1. In Groups settings select the certificate entity for the MS host.

      For example: MS_engine. If you open the Certificate selector window you can see the unique identifier of the MS host and also certificate information, such as version, serial number, issue date and validity period, algorithms and keys. This information is useful when selecting which certificate to use.

   2. Select agents validator CA group.

      For example: MS_Host_CA. If you open the CA group selector window you can define the CA group which is used to verify the certificate of the agents during the handshake. Data is available on CA group name, certificate name and certificate information for the selected CA groups.

      

      Figure 13.16. SSL settings

      OR

   3. In Advanced settings enter manually the following data.

      • full path of the file where the private key is stored,

      • certificate,

      • CA directory identifying the directory where the CA certificate entities are stored,

      • and CRL directory giving the place of the CRLs corresponding to the CA

        screenshot

      

      Figure 13.17. Advanced settings for SSL connection