Communication Issues Between Collectors or Activity Monitors and the Agent Configuration Manager

The Agent Configuration Manager and the Collectors or Activity Monitors might have trouble communicating with each other. This would result in no activities being collected or failed Crawl / Permission Collection / Data Classification tasks.

This could be caused by a registry value interfering with the SSL handshake that usually occurs between those services. This would introduce an extra criterion for the certificate to comply with that isn’t normally part of the procedure, preventing the service from properly identifying itself.

This registry value is called SendTrustedIssuerList and it’s located under the following path: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL.

If this registry value exists and is set to 1 (true), set it to 0 (false).

If it doesn’t exist or is set to 0 (false), then this is not the cause of the issue.

More information about this registry value can be found here: https://learn.microsoft.com/en-us/windows-server/security/tls/what-s-new-in-tls-ssl-schannel-ssp-overview#BKMK_TrustedIssuers