TLS protocol configuration for KVM on RHEL 9.6 Environment

Last Updated : Oct 30, 2026 |
Prolog information
Metadata
Keywords:
ASP 130 R7.x KVM on RHEL 9.6 comes with the system-wide cryptographic policy profile set to customized DEFAULT:NO-CBC-NO-SHA1, enabling TLS v1.2 and TLS v1.3 only. TLS v1.0 and TLS v1.1 are disabled by default. Weak and deprecated CBC and SHA-1 encryption ciphers are disabled. ASP 130 R7.0.x KVM on RHEL 9.6 encrypted ISO comes with the system-wide cryptographic policy profile set to customized FIPS.
R7.0 Standard ISO
R7.0 Encrypted ISO
Default: NO-CBC-NO-SHA1
FIPS
Figure: Cryptographic policy profile shown in Cockpit for standard ISO
a screenshot showing the Configuration section
Figure: Cryptographic policy profile shown in Cockpit for encrypted ISO
Related links
Additional Configuration Guidelines