topic Re: How to disable CBC mode cipher encryption, and enable CTR or GCM cipher mode encryptio in ProLiant Servers (ML,DL,SL)

How to disable CBC mode cipher encryption, and enable CTR or GCM cipher mode encryption.

MEHRUDDIN — Fri, 15 Sep 2023 16:06:21 GMT

ILO 5 - How to disable CBC mode cipher encryption, and enable CTR or GCM cipher mode encryption without any imapct of ILO 5 configuration.

Re: How to disable CBC mode cipher encryption, and enable CTR or GCM cipher mode encryptio

thutchings — Fri, 15 Sep 2023 11:49:39 GMT

Hello,

I am not aware of any way to get rid of these without changing anything related to the iLO configuration. However, you can get rid of the CBC ciphers by logging into the iLO GUI Security -> Encryption and change the security setting from "Production" to "High Security". When the change is made the iLO will reset and the ciphers will no longer be used.

Be aware that this also has other impacts. This will also impact the ability of the server to perform offline updates using the SPP as any access of this type requires the "tool" in use to login. If the updates are performed via Oneview or if you perform the updates online (using SUT, for instance) then there will be no impact other than having to configure the password for SUT.

Regards

Re: How to disable CBC mode cipher encryption, and enable CTR or GCM cipher mode encryptio

Sunitha_Mod — Fri, 06 Oct 2023 06:32:57 GMT

Hello @MEHRUDDIN,

Let us know if your concern has been addressed.

If you have no further query and you are satisfied with the answer then kindly mark the topic as Solved so that it is helpful for all community members.