Dell Unity: How to Disable TLS 1.0 and 1.1 on Unity Array

Summary: This article explains how to disable TLS 1.0 and 1.1 on a Unity array. (User Correctable)

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.
Check out other resources

Instructions

Facts:
Unity 4.3 and later
Disabling TLS 1.0 is not available on Unity Operating Environment 4.2.1 or earlier.
PUHC error: "TLSv1.0 and TLSv1.1 are not secure. It is recommended that you use TLSv1.2. See KB 22527 for information about how to disable TLSv1.0 and TLSv1.1"

Procedure:
This procedure is run using UEMCLI as service user.

 

Caution:  If you are running a client application which does not support TLS v1.2, disabling TLS v1.0 and v1.1 will cause that application to lose connection and it will be unable to reconnect.  For example, Windows 2000 and Windows XP do not support TLS v1.2; disabling TLS v1.0 and v1.1 in your Unity system will cause Windows 2000 and Windows XP clients to lose access.

You are responsible for checking with your application vendor to see if it supports TLS v1.2 before proceeding.  Failure to do so may cause any affected clients to lose access to data.

 

Note: Instructions for using UEMCLI are in article Dell Unity: How to use Unisphere CLI (UEMCLI) commands. 

 

Note: UEMCLI clients 5.0.2 and earlier do not support TLSv1.2. If TLSv1.1 is disabled on Unity, the old UEMCLI clients cannot connect with Unity. Upgrade to UEMCLI client version 5.0.3 or later to ensure support for TLSv1.2.

If FIPS PUB 140-2 compliant is enabled, Unity uses TLS v1, TLS v1.1, and TLS v1.2 with communication only through Federal compliant ciphers.

 

Note: In each one of these commands, the user will be prompted to enter a password.  This is the password for the user specified by the -u field, in this case the user is admin.  When prompted, enter the password for the user admin.

 


Disable TLS 1.0 on Unity OE 5.1 and later arrays on using the below steps:

  1. Show the current settings with the command: 
    uemcli -u admin -securePassword /sys/security show
  2. Disable TLS 1.0 with the command: 
    uemcli -u admin -securePassword /sys/security set -tlsMode TLSv1.1

    Alternatively, you can disable TLS 1.0 and 1.1 by setting -tlsMode TLSv1.2.

    uemcli -u admin -securePassword /sys/security set -tlsMode TLSv1.2

In case the array is running OE 4.3 to 5.0, disable TLS 1.0 by using the below steps:

  1. Show the current settings with the command:

    uemcli -u admin -securePassword /sys/security show

  2. Disable TLS 1.0 with the command:

    uemcli -u admin -securePassword /sys/security set -tls1Enabled no

    Example for the above commands:

    XXXXX spb:~> uemcli -u admin -securePassword /sys/security show
    Password:
    Storage system address: 127.0.0.1
Storage system port: 443
HTTPS connection

1:    FIPS 140 mode         = disabled
      TLS mode              = TLSv1.0 and above
      Restricted shell mode = enabled

XXXXX spb:~> uemcli -u admin -password Password1234# /sys/security set -tlsMode TLSv1.1
Storage system address: 127.0.0.1
Storage system port: 443
HTTPS connection

Please refer to the Security Configuration Guide for backward compatibility.
This change may impact running operations (e.g. replication) and the management services will be automatically restarted for the change to take effect.
Do you want to continue?
yes / no: yes
Operation completed successfully.

XXXXXspb:~> uemcli -u admin -securePassword /sys/security show
    Password:
    Storage system address: 127.0.0.1
Storage system port: 443
HTTPS connection

1:    FIPS 140 mode         = disabled
      TLS mode              = TLSv1.1 and above
      Restricted shell mode = enabled

    If the user has special characters in the password, use the below commands. When prompted for the password, enter the user password with special characters:

    uemcli -u admin -securePassword /sys/security show

uemcli -u admin -securePassword /sys/security set -tlsMode TLSv1.2

 

Additional information:

Affected Products

Dell EMC Unity, Dell Unity 450F DC, Dell Unity 300, Dell Unity 300 DC, Dell EMC Unity 300F, Dell EMC Unity 350F, Dell Unity 350F DC, Dell EMC Unity XT 380, Dell EMC Unity XT 380F, Dell EMC Unity 400, Dell Unity 400 DC, Dell EMC Unity 400F , Dell EMC Unity 450F, Dell EMC Unity XT 480, Dell EMC Unity XT 480F, Dell EMC Unity 500, Dell EMC Unity 500F, Dell EMC Unity 550F, Dell EMC Unity 600, Dell EMC Unity 600F, Dell EMC Unity 650F, Dell EMC Unity XT 680, Dell EMC Unity XT 680F, Dell EMC Unity XT 880, Dell EMC Unity XT 880F, Dell EMC Unity Family |Dell EMC Unity All Flash, Dell EMC Unity Hybrid ...
Article Properties
Article Number: 000022527
Article Type: How To
Last Modified: 12 May 2025
Version:  18
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.