SSL Communication Parameters

Thie following describes the SSL-related parameters that determine communication modes for Control-M/Server, Control-M/Agent, and Control-M/EM:

Control-M/EM

The system parameter CmsCommMode determines if the communication protocol between Control-M/EM and Control-M/Server is TCP or SSL. To define Control-M/EM system parameters, see Defining Control-M/EM System Parameters.

The following table describes the possible values.

Value

Description

TCP

TCP connections are supported between Control-M/EM and Control-M/Server only.

AUTO

CMS and the Gateways attempt to communicate with Control-M/Server using SSL, and on failure, switch to TCP.

SSL

SSL connections are supported between Control-M/EM and Control-M/Server only.

Control-M/Server

The Secure Sockets Layer system parameter determines the communication mode the Server uses to communicate with Agents and Control-M/EM. You can set this parameter to any of the communication modes shown in the following table.

Mode

Description

ENABLED

Control-M/Server works in SSL mode.

The Control-M/Server attempts to switch the Agent to SSL=Y mode when it connects via SSL=N mode.

INACTIVE

Control-M/Server works in non-SSL mode.

The Control-M/Server attempts to switch the Agent to SSL=N mode when it connects via SSL=Y mode.

DISABLED

Control-M/Server works in non-SSL mode.

The Control-M/Server does not attempt to switch the Agent to SSL=N mode when it connects via SSL=Y mode.

Changing the Server communication mode from ENABLED to DISABLED might cause all Agents to become unavailable. In that case, you must change the Server mode to INACTIVE and wait until all required Agents become available. Then you can change the Server mode to ENABLED or DISABLED.

Control-M/Agent

The COMMOPT parameter determines the Agent SSL communication mode, based on one of the following settings:

  • SSL=Y: SSL communication is enabled

  • SSL=N (SSL communication is disabled.

The COMMOPT parameter is located in the following directory, based on the operating system:

  • Windows: Inside the Control-M/Agent CONFIG registry section, which is located at:

    • Default Installation: \HKEY_LOCAL_MACHINE\SOFTWARE\BMC Software\Control-M/Agent\CONFIG

    • Non-default Installation: \HKEY_LOCAL_MACHINE\SOFTWARE\BMC Software\Control-M/Agent\<Instance_Name>\CONFIG
  • UNIX: Inside the <Agent Home Directory>/ctm/data/CONFIG.dat file.

  • IBM i (AS/400): Inside the <Agent Home Directory>/data/CONFIG file.