Dell ThinOS 2402 Administrator’s Guide

TLS Control

TLS 1.2 is the only option available from ThinOS 2303. TLS 1.0 and 1.1 have been removed from the TLS protocol list in Admin Policy Tool > Privacy & Security > Security Policy. If you set TLS 1.0 or 1.1 from Wyse Management Suite, ThinOS 2303 or later versions do not apply.

To improve the security of ThinOS devices, from 2311, ThinOS uses OpenSSL version 3.0, and the default TLS security level is 1. If your environment requires a legacy OpenSSL version (like SHA1 certification), change the TLS security level to 0 in Wyse Management Suite policy by going to Privacy & Security > Security Policy. Legacy OpenSSL versions are not supported on future ThinOS versions. If a Legacy OpenSSL version is required, update your environment.

To improve the security of ThinOS devices, a few outdated and less-secure ciphers are removed. Some outdated and less-secure TLS ciphers are going to be removed in the next release. Some TLS ciphers are also going to be disabled by default in the next release.