topic Current Negotiated Cipher in Servers - General

Current Negotiated Cipher

anwar3 — Wed, 13 May 2020 17:32:14 GMT

Hello,

i have a vulnerability on ILO 2,3,4 Cards (SSH Server Public Key Too Small) ,when i check my card i find this

"Current cipher: ECDHE-RSA-AES128-GCM-SHA256" ,how i can change this to AES256 ??

solution of qualys is :DSA keys and RSA keys shorter than 2048 bits are considered vulnerable. It is recommended to install a RSA public key length of at least 2048 bits or greater, or to switch to ECDSA or EdDSA.

anyone have a solution for this vulnérabilité .

Re: Current Negotiated Cipher

Vinod_R — Sat, 16 May 2020 08:41:20 GMT

Hello User,

Please refer below articales

https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=emr_na-c04197764

https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=emr_na-c04582218

https://www.cvedetails.com/vulnerability-list/vendor_id-10/product_id-23648/HP-Integrated-Lights-out-4-Firmware.html

https://www.cvedetails.com/vulnerability-list/vendor_id-10/product_id-23647/HP-Integrated-Lights-out-3-Firmware.html

Thanks & Regards,

Vinod Rawat