| |
Results |
|
How-To Setup SBM (10.1.3 - 11.7.0) on a TLS hardened server / Disable SSL
|
Secure SSL and TLS in SBM version 10.1.3 through 10.1.5.x. SBM versions 10.1.3 through 10.1.5.x utilize JBoss running under the JDK 1.7. By default, JDK 1.7 does not enable TLSv 1.1 or TLSv1.2. Because of this, the Orchestration Engine will not be able to communicate any external web services that have been hardened to not use TLSv1.0.
|
|
|
|
PVCS Version Manager - How to disable SSLv3 and optionally also TLSv1.0 and TLSv1.1, or how to exclusively use TLSv1.2
|
BEAST (Browser Exploit Against SSL/ TLS )
|
|
|
|
Things to Consider when disabling TLSv1.0 and TLSv1.1 for SBM 11.7.1+
|
If other programs are running on the SBM server, you may prevent the user from accessing those systems. For example, Remote Desktop requires a server connection on TLS .
|
|
|
|
Agents don't appear online after a server upgrade to Deployment Automation version 6.1.1 or higher
|
... allow only the TLS protocols. ... 2,TLSv 1.1 ,TLSv1 ... ... 2,TLSv 1.1 ,TLSv1 ... ... the list of disabled algorithms, remove ... ... SDA 6. 1.1 . server.ssl.enabled.protocols=TLSv1.2,TLSv 1.1 ,TLSv1 ... sslEnabledProtocols="TLSv1.2,TLSv 1.1 ,TLSv1" ... The upgraded agent can now connect to the SDA 6. 1.1 server using one of TLS protocols (depending on the Java version used by the agent).
|
|
|
Mitigating POODLE in SBM.doc
|
Most connections between modern clients and servers use TLS instead of the outdated SSL. ... Usually this protocol downgrade steps down from TLS to SSL. ... Following are instructions for disabling SSL 3.0 on IIS and JBoss servers. ... Value date can be set to "1" - Enabled or "0" – Disabled ... protocols="TLSv1,TLSv 1.1 ,TLSv1.2" ... <!-- SSL/ TLS Connector --> ... sslProtocol=" TLS " protocols="TLSv1,TLSv 1.1 ,TLSv1.2"
|
|
|
|
Mitigating POODLE in Dimensions CM.DOCX
|
Most connections between modern clients and servers use TLS instead of the outdated SSL. ... Usually this protocol downgrade steps down from TLS to SSL. ... sslProtocols ="TLSv 1.1 ,TLSv1.2" ... protocol="HTTP/ 1.1 " redirectPort="8443" ... sslProtocols = "TLSv 1.1 ,TLSv1.2"/> ... If you have enabled the Secure Standard Dimensions Protocol (SSDP) on your Dimensions CM server you will also need to disable its use of SSLv3 by doing the following:
|
|
|
|
S141805 Dim14.2 SSO Install Checklist.docx
|
" sslEnabledProtocols="TLSv1.2,TLSv 1.1 ,TLSv1" sslProtocol=" TLS " truststoreAlgorithm="AnyCert" truststoreFile="conf/serena.keystore" truststorePass="serena”/> ... How do we disable SSO without uninstalling it?
|
|
|
Serena Release Control: ChangeMan ZMF Plugin Quick Reference
|
... "HTTP/ 1.1 " SSLEnabled="true" maxThreads="150" scheme="https" secure="true" clientAuth="false" sslProtocol=" TLS " keystoreFile="/u/tomcat/TomcatCertificate.cer" keystorePass="TomcatPassword" /> ... Therefore, if you need to reject and revert based on a failure, you'll need to activate or create additional deployment tasks at the time they are needed and inactivate any tasks in the list that should no longer be executed.
|
|
|
|
Installation Guide and Configuration Guide
|
... of a SAML 1.1 token to convey ... ... Card authentication is disabled by default after ... ... the SSL/ TLS Connector and update ... ... - SSL/ TLS Connector for client ... For steps on disabling the default identity transformer or replacing it with your own customized implementation, see Customizing the Smart Card Authentication Exits [page 234]. ... Note: You can easily disable the default identity transformer by inserting comment tags around this section and the "X509CertificateToUsertNameScript" setting in the Configuration.xml file.
|
|
|
|
Installation Guide and Configuration Guide
|
... of a SAML 1.1 token to convey ... ... Card authentication is disabled by default after ... ... the SSL/ TLS Connector and update ... ... - SSL/ TLS Connector for client ... For steps on disabling the default identity transformer or replacing it with your own customized implementation, see Customizing the Smart Card Authentication Exits [page 246]. ... Note: You can easily disable the default identity transformer by inserting comment tags around this section and the "X509CertificateToUsertNameScript" setting in the Configuration.xml file.
|
|
|
