Configuring the TLS cipher suite list

Last Updated : Nov 25, 2021 |

About this task

From System Manager Release 8.0, the TLS cipher suite lists for establishing a secure communication are:

  • Strict cipher suite list

  • Relax cipher suite list

When you deploy the System Manager Release 8.0 OVA or upgrade System Manager to Release 8.0, by default, the system enables the Relax cipher suite list.

Use the following procedure to configure the required cipher suite list for the system.

Procedure

  1. Log in to the System Manager command line interface.
  2. Do one of the following:

    • To configure strict cipher suite list, type the following command. This would disable CBC ciphers.

      changeCipherSuiteList LIST2

    • To configure relax cipher suite list, type the following command. This would enable CBC ciphers.

      changeCipherSuiteList LIST1

    The system restarts the Application server on execution of the cipher suite list command.