Preparing an SSL connection for data exchange between the Endpoint Sensors and Central Node components

The Endpoint Sensors component continually monitors processes, active network connections, and files that are modified on computers on which the component is installed, and sends this monitoring data to the server with the Central Node component.

To enable the Endpoint Sensors component to send files to the server with the Central Node component, you need to strengthen the security of the SSL connection between the Endpoint Sensors component and the Central Node server.

You can strengthen the security of the SSL connection between computers with the Endpoint Sensors component and the Central Node server by fulfilling the following conditions when configuring the local network of your organization:

• Deploy Active Directory Domain Services in the local network of your organization.
• Connect the computers on which the Endpoint Sensors component is installed to Active Directory.

Perform the necessary actions to strengthen the security of the SSL connection between computers with the Endpoint Sensors component and the Central Node server in the following sequence:

1. Download an SSL certificate from the server with the Central Node component.

   You can download a certificate that was automatically created on the server with the Central Node component during the program installation process, a certificate that was manually created on the server with the Central Node component, or a certificate that was independently created and uploaded to the server with the Central Node component.

2. Prepare an SSL certificate and upload it to Active Directory.

In this section Downloading an SSL certificate from the server with the Central Node component Creating an SSL certificate on the server with the Central Node component Uploading an independently prepared SSL certificate to the server with the Central Node component Preparing and uploading an SSL certificate to Active Directory

Page top