topic Re: Medium strenght Ciphers in HPE OneView

Medium strength Ciphers

BradV — Mon, 29 Nov 2021 11:01:45 GMT

Is there a way to tell OneView to not use medium strength (or lower) ciphers? We are currently running version 6.10.

Re: Medium strenght Ciphers

ChrisLynch — Wed, 24 Nov 2021 18:07:40 GMT

You have a few options:

1. Put the appliance into FIPS or CNSA cryptography mode. This will limit certain services you may be using thag might not support either mode. A compatibility report must be run first.
2. Update to OneView 6.40, which you can enforce GCM ciphers for the UI and API only. This has no impact of other protocols or ciphers that could be used for outbound communications.

Re: Medium strenght Ciphers

BradV — Mon, 29 Nov 2021 10:21:58 GMT

Hi Chris,

Thanks! I will look into getting the update. It is port 5671 they are complaining about.