Configuring trusted connection on Kaspersky Endpoint Agent side
13 September 2022
ID 200216
This Help provides information related to Kaspersky Endpoint Agent for Windows. This information may be partially or completely inapplicable to Kaspersky Endpoint Agent for Linux. For complete information about Kaspersky Endpoint Agent for Linux, please refer to the Help of the solution that includes the application: Kaspersky Anti Targeted Attack Platform or Kaspersky Managed Detection and Response.
You can configure a trusted connection between Kaspersky Sandbox and Kaspersky Endpoint Agent in the web interface of Kaspersky Sandbox server that is not included in the cluster.
If you have already merged servers into a cluster, remove the server from the cluster, then create a new cluster based on this server and add all the servers intended for Kaspersky Sandbox solution to the new cluster.
If the servers you need belong of another cluster, remove them from that cluster one by one and then add them to your cluster.
To configure trusted connection on Kaspersky Endpoint Agent side:
- Do one of the following:
- In the Kaspersky Sandbox integration section select the Connection settings subsection.
- In the Kaspersky Sandbox integration settings group, select the Use pinned certificate to protect connection check box.
- Click the Use trusted connection button.
The Add TLS certificate window opens.
- Perform one of the following actions to add a TLS certificate created on Kaspersky Sandbox side:
- Add a certificate file. Click Upload, and in the window that opens, select the certificate file and click Open.
- Copy and paste the contents of the certificate file to the TLS certificate data field.
Kaspersky Endpoint Agent may have only one TLS certificate of Kaspersky Sandbox server. If you have added a TLS certificate before and then add a TLS certificate once again, only the last added certificate is valid.
- Click OK.
Information about the added TLS certificate is displayed in the Kaspersky Sandbox integration settings group.
- If you configure the settings in the policy properties window, in the upper right corner of the group of settings, change the switch from Undefined to Enforce.
- Click OK.
- Click the Save button.
Trusted connection to Kaspersky Sandbox server is configured.