AE Services does not support the following utilities for Software-Only deployment.
Security attribute |
Description |
Standard profile |
Hardened profile |
Command |
Set TLS versions |
To enable or disable TLS versions 1.0, 1.1, 1.2, and 1.3. You can also set the TLS versions using the AE Services management console. |
Yes |
Yes |
setTLSviaCLI [enable|disable] [1.0,1.1,1.2,1.3]
|
SELinux* |
To set the SELinux mode of RHEL. |
Disabled |
Enforced |
setSELinux [enforce|permissive|disable|status]
|
Kernel FIPS |
To enable or disable FIPS mode for Kernel. |
Disabled |
Enabled |
kernelFIPSmode [on|off|status]
|
Database Auditing |
To enable or disable the auditing of database actions. |
Manual Enablement |
Manual Enablement |
DBAudit [enable|disable|status]
|
AIDE (File Tampering Prevention) |
To reconfigure AIDE properties. |
Manual Enablement |
Manual Enablement |
setAIDE [configure|status|scan|update|enable|disable]
|
getlogs |
To grab the logs for troubleshooting an AE Services server. |
Manual Enablement |
Manual Enablement |
|
Note:
*If SELinux status is Disabled in AE Services, do not enable the SELinux Enforcing mode directly. It may lead to undefined behavior. First, convert SELinux to Permissive mode using the command: setSELinux permissive and then, enable the Enforcing mode.
