Host is registered for TLS but not using it, Windows

CMK version:
OS version:
I am using rocky linx 9 for server and I have windows server as host, I can succesfuly register it but I dont know how to enable TLS. This is my status on server side
Connection: test-checkmk.dem.si/monitoringTest
UUID: 8c344d41-b9cf-4f9a-bd76-e1543f959748
Local:
Connection mode: pull-agent
Connecting to receiver port: 8000
Certificate issuer: Site ‘monitoringTest’ agent signing CA
Certificate validity: Tue, 14 May 2024 11:03:20 +0000 - Mon, 14 May 2029 11:03:20 +0000
Remote:
Connection mode: pull-agent
Hostname: ECAMPUS

This is what I get on host side cmk-agent-ctl.exe" status
Version: 2.2.0p23
Agent socket: operational
IP allowlist: any
Legacy mode: enabled
No connections

Error message:

This is my error message 4: A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond. (os error 10060)

Hi boomlau,
this shows, that your host is not registered correctly.
The successful registration enables the TLS encryption and the agent is not in legacy mode after that.
Try to register the host again and look for the error message.
You need access from the monitored host to the Agent receiver port on the checkmk server, that is usually Port 8000 for the first created site.

And checkmk is case sensitive, so the name must match case sensitive the name for that host in checkmk.