An appliance automatically registers with the Registry and Discovery Service (RDS) when Trellix Helix mode is enabled on the appliance. The RDS allows appliances to discover the Trellix Helix alert ingestion URI and the Trellix Helix Web UI URL so alerts can be sent to the Trellix Helix Web UI.
The communication between the appliances and the RDS is over HTTPS using SSH-RSA authentication.