---
title: Enable OpenSSL to Secure Internal Communications
description: Flag for whether Windows-based agents use the Windows built-in Secure Channel API or OpenSSL to secure internal communication with AM:
component: web-agents
version: 2025.11
page_id: web-agents:properties-reference:org.forgerock.agents.config.secure.channel.disable
canonical_url: https://docs.pingidentity.com/web-agents/2025.11/properties-reference/org.forgerock.agents.config.secure.channel.disable.html
---

# Enable OpenSSL to Secure Internal Communications

Flag for whether Windows-based agents use the Windows built-in Secure Channel API or OpenSSL to secure internal communication with AM:

* `true`: The agent uses OpenSSL.

* `false`: The agent uses the Windows built-in Secure Channel API.

Default: `false`

|                    |                                                                                    |
| ------------------ | ---------------------------------------------------------------------------------- |
| Property name      | `org.forgerock.agents.config.secure.channel.disable`   Introduced in Web Agent 4.x |
| Function           | Encryption                                                                         |
| Type               | Boolean: `true` returns true; all other strings return `false`.                    |
| Bootstrap property | Yes                                                                                |
| Required property  | No                                                                                 |
| Restart required   | No                                                                                 |