I figure I must be missing something obvious here. How do you force iMonitor to only use TLS 1.2 and not allow 1.0 or 1.1? This is in eDir 9.2.6 and 9.2.7. Thanks.
Matt
Cybersecurity
DevOps Cloud
IT Operations Cloud
If an answer to your question is correct, click on "Verify Answer" under the "More" button. The answer will now appear with a checkmark. Please be sure to always mark answers that resolve your issue as verified. Your fellow Community members will appreciate it! Learn more.
I figure I must be missing something obvious here. How do you force iMonitor to only use TLS 1.2 and not allow 1.0 or 1.1? This is in eDir 9.2.6 and 9.2.7. Thanks.
Matt
; By default, TLSv1.0, TLSv1.1, TLSv1.2 protocols are enabled.
; SSLv2 and SSLv3 protocols are disabled by default and cannot be enabled because they are weak ciphers.
;
; Attributes to enable or disable TLS protocols are:
; TLSv1.0 ----> SSLNOTLSv1 should be set to "true" or "false"
; TLSv1.1 ----> SSLNOTLSv1_1 should be set to "true" or "false"
; TLSv1.2 ----> SSLNOTLSv1_2 should be set to "true" or "false"
;
; Example 1: To disable TLSv1.0
; SSLNOTLSv1 true
;
; Example 2: To enable or disable multiple TLS versions, specify each value on a new line.
; SSLNOTLSv1 false --- enables TLSv1.0
; SSLNOTLSv1_1 true --- disables TLSv1.1
; SSLNOTLSv1_2 true --- disables TLSv1.2
;
; Note: If you modify the setting it will be necessary to restart NRM.
; By default, TLSv1.0, TLSv1.1, TLSv1.2 protocols are enabled.
; SSLv2 and SSLv3 protocols are disabled by default and cannot be enabled because they are weak ciphers.
;
; Attributes to enable or disable TLS protocols are:
; TLSv1.0 ----> SSLNOTLSv1 should be set to "true" or "false"
; TLSv1.1 ----> SSLNOTLSv1_1 should be set to "true" or "false"
; TLSv1.2 ----> SSLNOTLSv1_2 should be set to "true" or "false"
;
; Example 1: To disable TLSv1.0
; SSLNOTLSv1 true
;
; Example 2: To enable or disable multiple TLS versions, specify each value on a new line.
; SSLNOTLSv1 false --- enables TLSv1.0
; SSLNOTLSv1_1 true --- disables TLSv1.1
; SSLNOTLSv1_2 true --- disables TLSv1.2
;
; Note: If you modify the setting it will be necessary to restart NRM.
So where exactly do you set this? I'm talking about iMonitor here, not NoRM. So the httpstk in eDir/NDS (by default on port 8030).
Matt