Disabling ciphers on WAS

Last Updated : Nov 10, 2025 |
Prolog information
Metadata
Keywords:
The following steps will help you to disable specific algorithms or cipher suites in WAS:
  1. Login to Avaya Breeze® platform node and su to root user.
  2. Run the following command as root to enable the WebSphere Administrative Console:
    ADDITIONAL INFORMATION:
    was set console on
  3. From a browser, navigate to the WebSphere Administrative Console: http://<breeze-mgmt-fqdn>:9060/ibm/console
  4. Enter user ID admin and click on Log in.
  5. Security Global Security Custom properties.
  6. Locate the existing property named: com.ibm.websphere.tls.disabledAlgorithms
  7. If the property exists, click the property name to edit it.
    ADDITIONAL INFORMATION:
    • Update the Value field with a comma-separated list of algorithms or cipher suites to disable.
    ADDITIONAL INFORMATION:
    For example, SSLv3, RC4, DES, MD5withRSA, DH keySize < 2048, DESede, EC keySize < 224, 3DES_EDE_CBC, anon, NULL
  8. If the property does not exist, click New and create it.
    ADDITIONAL INFORMATION:
    • Name: com.ibm.websphere.tls.disabledAlgorithms
    • Value: SSLv3, RC4, DES, MD5withRSA, DH keySize < 2048, DESede, EC keySize < 224, 3DES_EDE_CBC, anon, NULL
  9. Click Apply, then Save to apply the changes directly to the master configuration.
  10. Restart the WebSphere Application Server or Avaya Breeze® platform node for the changes to take effect.
  11. Run the following command using root access to turn the IBM console off:
    ADDITIONAL INFORMATION:
    was set console off
Related links
Enabling ciphers suites in WAS