Force Default SSL Certificate Validation

Used to override the default behavior for SSL validation

This property has three states:

true: Forces the Agent to perform full validation of the certificate sent by the Controller, enabling the Agent to enforce the SSL trust chain. Use this setting when a public certificate authority(CA) signs your Controller SSL certificate.

false: Forces the Agent to perform minimal validation of the certificate. This property disables full validation of the Controller's SSL certificate. Use this setting when full validation of a SaaS certificate fails.

unspecified: The validation performed by the Agent depends on the context:

  • If the Agent is connecting to a SaaS Controller, full validation is performed.
  • If the Agent is connecting to an on-premises Controller and the cacerts.jks file is present, then full validation is performed using the cacerts.jks file.
  • If the Agent is connecting to an on-premises Controller, and there is no cacerts.jks file, then minimal validation is performed

Element in controller-info.xml: N/A

System Property: -Dappdynamics.force.default.ssl.certificate.validation

Environment Variable: N/A

Type: Boolean

Default: None

Required: No