Oracle^® SuperCluster M8 and SuperCluster M7 Security Guide

Disable Unapproved TLS Protocols for HTTPS

By default, the TLSv1.0, TLSv1.1, and TLSv1.2 protocols are enabled for the HTTPS service.

You can disable one or more TLS protocol versions that do not comply with your security policies.

For security purposes, use TLSv1.2 unless support for older versions of the TLS protocol is required.

1. On the management network, log in to Oracle ILOM.

   See Log in to the Oracle ILOM CLI.

2. Determine the list of TLS protocol versions that are enabled for the HTTPS service.

   -> show /SP/services/https tlsv1 tlsv1_1 tlsv1_2
   /SP/services/https
   Properties:
   tlsv1 = enabled
   tlsv1_1 = enabled
   tlsv1_2 = enabled
   

3. Disable TLSv1.0.

   -> set /SP/services/https tlsv1_0=disabled
   

4. Disable TLSv1.1.

   -> set /SP/services/https tlsv1_1=disabled
   

5. Verify the setting by repeating Step 2.