Views:
 
Before doing the procedure below, make sure you have upgraded to Deep Security 9.5 Service Pack 1 Patch 3 or above, Deep Security 9.6 SP1 Patch 1 or above. Upgrading to the latest version is highly recommended.

Do the following:

  1. Execute the commands below on Deep Security Manager server installation path:

    dsm_c -action changesetting -name settings.security.defaultKeyLength -value 2048

    dsm_c -action changesetting -name settings.security.defaultSignatureAlg -value SHA256WithRSA

    Executing the commands

  2. Deactivate the DSA clients and reactivate them using the Deep Security Manager console.
  3. Check the SSL certificate files (ds_agent.crt) in the default agent path below:

    C:\ProgramData\Trend Micro\Deep Security Agent\dsa_core

    Check SSL certificate files

Keywords: sha256 with rsa,adjust key length,key length 2048,update ssl certificate