PowerProtect Data Manager 19.10 Security Configuration Guide

Application agents and security certificates

If you have replaced the default self-signed security certificates, the behavior of application agents depends on the installed version of the agent software.

For application agents from PowerProtect Data Manager 19.8 and earlier, these legacy agents are unaware of changes to the certificates that secure communication with the server. Legacy agents lack the ability to use the new security certificates. Subsequently, legacy agents always use the default self-signed security certificate to secure all communication with PowerProtect Data Manager, even if you replace the UI and REST API certificates. In the UI, this is the restserver certificate on the Internal tab.

Application agents from PowerProtect Data Manager 19.9 and later can automatically retrieve new security certificates from the server at registration. Agents then use the new certificates to secure communication with PowerProtect Data Manager.