How to disable CBC mode cipher encryption, and enable CTR or GCM cipher mode encryption.

[MEHRUDDIN]

ILO 5 - How to disable CBC mode cipher encryption, and enable CTR or GCM cipher mode encryption without any imapct of ILO 5 configuration.

[thutchings]

Hello,

I am not aware of any way to get rid of these without changing anything related to the iLO configuration. However, you can get rid of the CBC ciphers by logging into the iLO GUI Security -> Encryption and change the security setting from "Production" to "High Security". When the change is made the iLO will reset and the ciphers will no longer be used.

Be aware that this also has other impacts. This will also impact the ability of the server to perform offline updates using the SPP as any access of this type requires the "tool" in use to login. If the updates are performed via Oneview or if you perform the updates online (using SUT, for instance) then there will be no impact other than having to configure the password for SUT.

Regards

[Sunitha_Mod]

Hello @MEHRUDDIN,

Let us know if your concern has been addressed.

If you have no further query and you are satisfied with the answer then kindly mark the topic as Solved so that it is helpful for all community members.