Operating System - HP-UX
1752726 Members
5757 Online
108789 Solutions
New Discussion юеВ

Enable support for TLS 1.2 and 1.3, and disable support for TLS 1.0

 
Kauser
Advisor

Enable support for TLS 1.2 and 1.3, and disable support for TLS 1.0

Dear Concern,

Please share me the procedure to enable support for TLS 1.2 and 1.3, and disable support for TLS 1.0 and also shar me the procedure to check current running TLS version.

With Best Regards,

Md. Abdullah-Al Kauser

6 REPLIES 6
AmRa
HPE Pro

Re: Enable support for TLS 1.2 and 1.3, and disable support for TLS 1.0

Please let us know the component on which you want to enable/disable TLS 1.0?

I am an HPE Employee.
[Any personal opinions expressed are mine, and not official statements on behalf of Hewlett Packard Enterprise]

Accept or Kudo
Kauser
Advisor

Re: Enable support for TLS 1.2 and 1.3, and disable support for TLS 1.0

Dear Concern,

We got below details requirement from IT security team. Please suggest.

The remote service accepts connections encrypted using TLS 1.0. TLS 1.0 has a number of cryptographic
design flaws. Modern implementations of TLS 1.0 mitigate these problems, but newer versions of TLS like 1.2
and 1.3 are designed against these flaws and should be used whenever possible.
As of March 31, 2020, Endpoints that arenтАЩt enabled for TLS 1.2 and higher will no longer function properly with
major web browsers and major vendors.
PCI DSS v3.2 requires that TLS 1.0 be disabled entirely by June 30, 2018, except for POS POI terminals (and
the SSL/TLS termination points to which they connect) that can be verified as not being susceptible to any
known exploits.

Re: Enable support for TLS 1.2 and 1.3, and disable support for TLS 1.0

>> The remote service accepts connections encrypted using TLS 1.0. 

Yes but *what service* ? Your security team should be able to tell you more than this - they should have an IP address/port number combination that should help you narrow down what service on the host is responsible for this.

TLS connections don't necesarily come from the OS - there are all sorts of services/software on a HP-UX host that could be being serviced via a TLS connection.

HTH

Duncan


I am an HPE Employee
Accept or Kudo
Paolo_c
Valued Contributor

Re: Enable support for TLS 1.2 and 1.3, and disable support for TLS 1.0

I would be interested to know if HP provided you with the procedure for enabling support for TLS 1.2 and 1.3 and disabling support for TLS 1.0 on HP-UX Servers (associated with Nessus plug-in 104743 : TLS Version 1.0 protocol detection) ?  

HPJ
New Member

Re: Enable support for TLS 1.2 and 1.3, and disable support for TLS 1.0

how to Enable support for TLS 1.2 and/or 1.3, and disable support for TLS 1.1. in iLO (Server Model HPE Proliant server DL360 Gen 10).

 

\
Jitendra Kumar

Sunitha_Mod
Moderator

Re: Enable support for TLS 1.2 and 1.3, and disable support for TLS 1.0

@HPJ

Hello Jitendra Kumar,

Thank you for posting! Since you have posted in an old topic and there is no response yet, I would recommend you to create a new topic using the create "New Discussion" button, so the experts can check and assist you further. 

Thanks,
Sunitha G
I'm an HPE employee.
[Any personal opinions expressed are mine, and not official statements on behalf of Hewlett Packard Enterprise]
Accept or Kudo