Questions about "CheckServerCertificate" and "CheckCertificateRevocation"

[HPNZNB]

Hello Experts, 

I have question about setting False value to "CheckServerCertificate" and "CheckCertificateRevocation" in registry key. 

We have thousand of servers installed Flexera full agents, which covers cloud servers and servers in different environments. Set False value to "CheckServerCertificate" and "CheckCertificateRevocation" can easily fix the issue that we are having on over 200 servers, but the FNMS article said this was a non recommended workaround (less secure). Can you ask you what kind of security will this cause if change the value to False. 

Thanks! 

[erwinlindemann]

When disabling the certificate check on your Flexera agents, the certificate on the FNMS Beacon is ignored. The HTTPS protocol provides only encryption as security on the transfer, without validating that the agent is contacting the correct inventory beacon server.

More detailed information on these two options for the Flexera agent can be found in the 'Gathering FlexNet Inventory' documentation:

• CheckServerCertificate
• CheckCertificateRevocation