How to Disable TLS 1.0 and TLS 1.1 Connections to PostgreSQL Database Port 5432 on the NMC Server

Summary: How to Disable Transport Layer Security (TLS) versions 1.0 and 1.1 connections to PostgreSQL database port 5432 on the NetWorker Management Console (NMC) Server.

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.
Check out other resources

Instructions

• How to Disable TLS 1.0 and TLS1.1 connections to PostgreSQL DB port 5432 on Dell NetWorker Console

Watch on youtube 



Steps:

  1. Connect to the NetWorker Management Console (NMC) server.
  2. Edit the postgresql.conf file. The file is in the following default locations:
Windows: C:\Program Files\EMC NetWorker\Management\nmcdb\pgdata\

Linux: /nsr/nmc/nmcdb/pgdata/
  1. Search for the string ssl_ciphers.
  2. Update the ssl_ciphers parameter to add the text:   
!TLSv1.0:!TLSv1.1
Example: 
Before Change:
ssl_ciphers = 'TLSv1.2:HIGH:!SSLv3:!NULL:!ADH:!MEDIUM:!LOW:!EXP:!MD5:!RC4:!3DES:@STRENGTH' #allowed SSL ciphers

After Change:
ssl_ciphers = 'TLSv1.2:!TLSv1.0:!TLSv1.1:HIGH:!SSLv3:!NULL:!ADH:!MEDIUM:!LOW:!EXP:!MD5:!RC4:!3DES:@STRENGTH' #allowed SSL ciphers
  1. Save the file.
  2. Restart the GST service.

Affected Products

NetWorker
Article Properties
Article Number: 000222301
Article Type: How To
Last Modified: 07 Mar 2024
Version:  2
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.