Share this page

# Secure communication over firewalls

When the MI Listener sends its Public Key to the OpenText Professional Performance Engineering Agent, it always sends its certificate as well: this is the server-side certificate. The agent can also be configured to authenticate the certificate it received. If the agent is configured to authenticate the certificate, it can verify whether the sender is really the machine that it claims to be by:

- Comparing the certificate's IP address with the sender's IP address

- Checking the validation date

- Looking for the digital signature in its Certification Authorities list

The MI Listener may also require the agent to send a certificate at any point in the session: this is the client-side certificate. You can set this option in the MI Listener Configuration dialog box.

If the agent owns a certificate, it sends the certificate to the MI Listener for the same authentication process. If the agent does not own a certificate, the communication might not be continued.

See also:

- Secure communication with TLS (SSL)
- Two-way TLS (SSL) authentication

https://admhelp.microfocus.com Professional Performance Engineering,VuGen 8942
Tips to improve your search results... OpenText™ Professional Performance Engineering Help Center OpenText™ Professional Performance Engineering Help 26.1 All View Local Help Center View Online Help Center Version: