PowerPath Management Appliance: How to Upgrade TLS Version in PowerPath Management Appliance
Summary: Because of a vulnerability issue in PPMA v2.5 using TLSv1.0, upgrading TLS from TLSv1.1 to TLSv1.2 might be needed.
Instructions
Steps to upgrade the TLS version:
1) Open the file "/etc/apache2/httpd-EMCPower.conf" as a text file.
2) Change the line "SSLProtocol TLSv1" to "SSLProtocol TLSv1.2".
3) Save the file and restart PowerPath Management Appliance VM/container.
TLS 1.2 Supported versions:
vCenter Server 6.0
vCenter Server 6.5
Web browsers Support for TLSv1.2 protocols, see the list below.
Microsoft Internet Explorer
Google Chrome
Mozilla Firefox
Opera
Apple Safari
Note:
vCenter Server 5.5 is not supported with TLSv1.2.
If you want to change the cipher suite, change the value of parameter "SSLCipherSuite" as mentioned here: https://httpd.apache.org/docs/2.4/ssl/ssl_howto.html#ciphersuites
TLS v1.1 and TLS v1.2 are both enabled in apache. That is the reason why nothing else is needed to use TLS v1.2