EcoStruxure IT Data Center Expert 8.3.0.91 | How to Disable TLS 1.0 and 1.1

[Bruxzer]

We recently upgraded DCE from 7.8.1 to 8.3.0.91 successfully. We received notification that TLS 1.0 and 1.1 are enabled reported by our Tenable vulnerability scan. We need advice on how to disable the vulnerability TLS protocols, as I don’t see an option to remediate via DCE client.

[VSales]

Hello Bruxzer,

You can now select the allowed SSL protocols for the web server and private proxy in the System> Administration Settings > Server Access option. You can select multiple TLS and SSL protocol versions for the web server. You can select only one protocol for the private proxy.

[APC_Steve]

Hi @Bruxzer ,

Newer versions of DCE may not have the individual options as mentioned above. What you can do in that case is to set the security policy to a higher setting/ If you set it to "future", I believe that will take care of it. If not, try "FIPS". Please keep in mind though that this may cause issues in launching to older devices as some of them may require older TLS.

Please also note that the Client may be required to be reinstalled in FIPS mode.

Steve