Getting "ERROR:Operation not permitted. To do this Enable default ssl profile by setting 'setssl parameter -defaultProfile E'

Getting "ERROR:Operation not permitted. To do this Enable default ssl profile by setting 'setssl parameter -defaultProfile E'

book

Article ID: CTX236664

calendar_today

Updated On:

Description

Need to disable to SSL V3 when NetScaler send SSL monitor probe as well as need to add custom ciphers under SSL profile bound to 


Instructions

- To enable custom ciphers, the Enhanced SSL profile should be configured by enabling the Enhanced Default SSL profile through the command 'setssl parameter -defaultProfile E'

- Before enabling Enhanced Default SSL profile through the aforementioned command, as mentioned in the Citrix document, https://docs.citrix.com/en-us/netscaler/11-1/ssl/ssl-profiles1.html, save the current configuration and take a back up of ns.conf.

NOTE: When the command 'setssl parameter -defaultProfile E' is executed, the Enhanced SSL profile settings will override the existing SSL profile settings bound on the Vserver as well as on the Vservice. Hence, take a backup of existing configuration before executing the above command. So that, customer can check the ns.conf and manually edit the SSL profile settings of specific Vserver with required parameters.