Forum Discussion

JD1's avatar
JD1
Icon for Altostratus rankAltostratus
Dec 13, 2017

TMUI / Configuration WebUI - TLS/SSL Configuration - ECDHE

Hi All, I'm currently using BIG-IP 11.6.2 HF1. I'm required to secure the Management WebUI ciphers offered out. I'd prefer to drop all key exchange methods except for ECDHE. However, it seems...
BIG-IP
ecdhe
security
TMOS
tmui
  • nitass's avatar
    nitass
    Dec 21, 2017

    But the point being is that the command sys httpd ssl-ciphersuite on 11.6.x, doesn't seem to then correctly configure Apache services to use this for the TMUI.

     

    i understand this has been corrected in 12.0.

     

nitass_89166's avatar
nitass_89166
Icon for Noctilucent rankNoctilucent

But the point being is that the command sys httpd ssl-ciphersuite on 11.6.x, doesn't seem to then correctly configure Apache services to use this for the TMUI.

 

i understand this has been corrected in 12.0.

 

JD1's avatar
JD1
Icon for Altostratus rankAltostratus
Dec 21, 2017

Yes, it has. I have tested that. It looks like my only option.

 

That's fine, just a bit more planning.