Disable TLS verion 1.0 and Reconfig Self-signed Certificate on Management Interface

HI Hoang,

1) Disable TLS 1.0 Protocol Detection on Management Interface (using HTTPS)

ANS: if you want to restrict to only TLS 1.1 and TLS 1.2 ciphers and disable use of TLS 1.0, then type the following command :

#tmsh modify /sys httpd ssl-ciphersuite ALL:!ADH:!EXPORT:!eNULL:!MD5:!DES:!SSLv2:!SSLv3:!TLSv1

#tmsh save sys config

#bigstart restart httpd

2) Reconfig Self-signed Certificate on Management Interface

Ans:

K42531434: Replacing the Configuration utility's self-signed SSL certificate with a CA-signed SSL certificate

https://support.f5.com/csp/article/K42531434

Hope this helps.

Let me know if you have any questions,

Nag