Dell Trusted Device Installation and Administrator Guide v5.5

Configure the Trusted Device agent

The Trusted Device agent requires custom registry values to deliver data to the Event Repository. To create these registry values with the Client Registry Generator in the Event Repository container, see Use the Client Registry Generator. Alternatively, create or modify the following registry values manually to configure the Trusted Device agent for use with the Event Repository:

• HKLM\Software\Dell\DellTrustedDevice\Overrides
  NOTE: This registry key is protected from tampering at the Administrator level. Dell Technologies recommends implementing these registry values before installing the Trusted Device agent on the target computer.
  NOTE: The values that are specified in these registry entries must match the appsettings.json configuration entries.

Modify the following registry values per the configuration of your Event Repository.

• [HKLM\Software\Dell\DellTrustedDevice\Overrides\SiemIntegrationPolicy\Repositories\CollectorHttps\Registration]
  • "Tenant"="ExampleTenant"
  • "TenantApiKey"="ExampleTenantKey"
  • "TenantId"="5568165d-216a-4631-a115-80de74f294fd"
  • "Uri"="https://example.server.com:31235/siem/api/v1"
    NOTE: The URI must be an HTTPS connection.
    NOTE: The server example.server.com must be trusted. The hostname must match, the Trust Chain must be trusted, and the date must be valid.
  • "RootCertificate"="ExampleCertificate"
• [HKLM\Software\Dell\DellTrustedDevice\Overrides\SiemIntegrationPolicy\Repositories\CollectorHttps\Connection]
  • "Uri"="https://example.server.com:31235/siem/api/v1"
    NOTE: The URI must be an HTTPS connection.
    NOTE: The server example.server.com must be trusted. The hostname must match, the Trust Chain must be trusted, and the date must be valid.
  • "RootCertificate"="ExampleCertificate"

Add the following registry values if you must use multiple root certificate hashes.

• [HKLM\Software\Dell\DellTrustedDevice\Overrides\SiemIntegrationPolicy\Repositories\CollectorHttps\Registration]
  • "Tenant"="ExampleTenant"
  • "TenantApiKey"="ExampleTenantKey"
  • "TenantId"="5568165d-216a-4631-a115-80de74f294fd"
  • "Uri"="https://example.server.com:31235/siem/api/v1"
    NOTE: The URI must be an HTTPS connection.
    NOTE: The server example.server.com must be trusted. The hostname must match, the Trust Chain must be trusted, and the date must be valid.
  • "RootCertificate"="ExampleCertificate1 ExampleCertificate2"
• [HKLM\Software\Dell\DellTrustedDevice\Overrides\SiemIntegrationPolicy\Repositories\CollectorHttps\Connection]
  • "Uri"="https://example.server.com:31235/siem/api/v1"
    NOTE: The URI must be an HTTPS connection.
    NOTE: The server example.server.com must be trusted. The hostname must match, the Trust Chain must be trusted, and the date must be valid.
  • "RootCertificate"="ExampleCertificate1 ExampleCertificate2"