vms set_ssl_ciphers

This command restricts the TLS cipher support on HTTPS connections to the VAST Web UI to a more restricted set of ciphers than the full set enabled with the minimum TLS version.

Usage

vms set_ssl_ciphers --ssl-ciphers SSL_CIPHERS
                   [--id ID]

Required Parameters

--ssl-ciphers SSL_CIPHERS

Specifies the more restricted TLS cipher set.

Specify SSL_CIPHERS as a string value.

If minimum TLS version is set to v1.3, you can specify AES256 to enable only the TLS_AES_256_GCM_SHA384 cipher on HTTPS connections to the VAST Web UI.

The following ciphers, otherwise supported with minimum TLS version 1.3, are disabled with this option:

TLS_AES_128_GCM_SHA256
TLS_AES_128_CCM_SHA256

Options

--id ID

ID of the VMS object

Example

The following example enables only the TLS_AES_256_GCM_SHA384 cipher when the minimum TLS version is 1.3:

vcli: admin> vms set_ssl_ciphers --id 1 --ssl-ciphers AES256
This action will impact your system.
Are you sure you want to change the ssl ciphers? [y/N] y
vcli: admin>