Nimble CS3000 and CS5000 disable TLS v1.0 and v1.1

[Katie2]

Good morning.

We need to disable TLS v1.0 and v1.1 on our Nimble devices. Please could some guidance be provided on how to do this and how to confirm the new settings are in place? Also, will the settings continue to be disabled if the devices are rebooted? Will amending the current settings require any downtime? Thank you.

[Nick_Dyer]

As part of Nimble's Common Criteria certification, it absolutely is possible to disable TLS v1. This is done via the CLI:

group --info | grep -i tlsv 

This will show if it's enabled/disabled

group --edit --tlsv1_enabled {yes|no}

 This will edit the array group for tls v1.

If you need assistance at any point please contact Nimble Support.