How to add, delete or modify On-Prem ADM Agent ciphers

How to add, delete or modify On-Prem ADM Agent ciphers

book

Article ID: CTX484586

calendar_today

Updated On:

Description

Provide the steps to modify ciphers used on ADM Agent on prem 

Instructions

To remove all the weak DHE ciphers on ADM Agent:
  1. Open an SSH session and modify the file “cipher_settings.conf” located in the '/flash/mpsconfig' directory of the agent and perform masd restart.
  2. Once the agent comes up after restart, the cipher changes will be reflected in agent. You can add or delete ciphers as needed.

  • Command for reset the process running inside ADM Agent 
masd restart
  • Command to verify the changes after masd restart 
bash-3.2# cat cipher_settings.conf
CIPHER_GROUP: None
CIPHER_LIST: ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-DES-CBC3-SHA:ECDHE-RSA-RC4-SHA

CIPHER_MODE: CipherSuites

Issue/Introduction

How to modify the ciphers accepted by ADM Agent

Additional Information



 
Powered by Wolken Software