Configuring TLS ciphers for connections

Last Updated : Feb 14, 2025 |

About this task

Perform the following procedure to enable and rank the required TLS ciphers for each service profile on the system. For each cipher, select the service profiles that can use the cipher. For service profile descriptions, see Security configuration. Enter a rank for each cipher to define the relative preference of the ciphers for each service profile.

Procedure

  1. Navigate to EM > System Configuration > Network Settings > Advanced Settings > TLS Ciphers.
  2. Select the appropriate TLS version from the TLS Version Filter for the Cipher that you want to modify. You can only select TLS versions that are enabled, and you may need to modify enabled TLS versions. Refer to Configuring connection security options for the procedure.
  3. Select the service profile and cipher configurations required for the system.
  4. For each cipher with service profile selections, rank the preference for using the cipher relative to other selected ciphers for the same service profile. The rank is a number between 0 and 2147483647, where 0 represents the highest preference in the rank.
    Tip:

    You can list the ciphers by assigned rank by clicking on the Rank column. You can list the ciphers by name by clicking on the Cipher Name column.

  5. Click Save.
  6. Click Confirm.

    Avaya Aura® MS restarts for the changes to take effect.

    Note:

    The TLSv1.3 ciphers for EM service profile are Java default TLSv1.3 ciphers and not configurable.

    See Configuring ICE TLS ciphers for ICE TLS configuration.