Disable TLS 1.0 and 1..1

[DavS]

Due to security reasons TLS 1.0 and 1.1 must be disabled on OVCs in our network. Any issues with disableing TLS?

[DeclanOR]

Hi @DavS 

In theory no. TLS 1.0/1.1 is disabled by default on newer OVC versions. TLS 1.2 is supported by VC.

To confirm 1.2 is enabled you can run following from any linux VM:  

nmap --script ssl-enum-ciphers -p 443 <OVC_IP_address>

Hope this helps.

Thanks,

DeclanOR

[DeclanOR]

@DavS 

Hi Davs.. Apologies, but it may be best to create a support ticket to discuss further as there may be some additional steps in ensuring correct move to TLS1.2. (unless of course you have already done so)  If you do raise a support ticket, feel free to reference FI-2778 to the engineer.

Thanks,

DeclanOR