Nimble Storage Model CS1000 - Software Version 5.0.6.0-593144-opt Disable TLSv1.0 and 1.1

[ioanp]

We have to disable tls v1.0 and v1.1 on Nimble Storage and to leave only tlsv1.2 active. We are having dificulties finding any settings or information in regard to this matter. Could someone help us with some information or point us to a manual? Thanks

[SprinkleJames · Accepted solution]

Hi ioanp,

Do you have access to this KB article on InfoSight? There's some info there that may help you.

[ioanp]

Hi James,

Thanks for the link, I was able to read it. 
It's very helpful. 

[Katie2]

Hi there. I have the same question for our CS3000 and CS5000 devices but the knowledge article link is no longer working. Is there some updated information you can forward me to please? And also, is the change persistent through reboots etc? 

Thank you. 

[sants]

@SprinkleJames  Looks like this link is dead now. Is there another source for this?

[SprinkleJames]

Here's an updated link:

KB-000352 Common Vulnerability and Exposure (CVE) status reports > NO-CVE-REPORT: Use of TLSv1.0 or TLSv1.1 are not recommended in some environments 

[EricKoh]

Hi @SprinkleJames, the link seems dead again! Appreciate if you could prove it here again, or can you just past the commands here? 

Thank you so much!

[SprinkleJames]

Here's the link:
https://infosight.hpe.com/InfoSight/media/kb/active/sup_KB-000352_Common_Vulnerability_and_Exposure_CVE_Status_Reports_.whz/index.html#tsi1504876963915.html

...and the command to disable TLS 1.0 and TLS 1.1:
group --edit --disable_tlsv1

[EricKoh]

Thank you so much for your prompt response! 

[StepInno]

Hello is the

command

group --edit --tlsv1_enabled {yes|no}

only going to affect the management? or does this affect iSCSI targets too we are using the Nimble with iSCSI connected to a pair of ESXi hosts. We need to make sure the iscsi are not impacted by this change.

We are using a CS300 and need to make sure its ok and supports TLS 1.2

Can you confirm?