# ECC Ciphers in 11.4.1

**URL:** <https://community.f5.com/t/ecc-ciphers-in-11-4-1/57166>\
**Category:** Technical Forums\
**Tags:** ssl, cipher, ltm, application-delivery, client-ssl-profile, ecc\
**Created:** [June 1, 2015, 4:07pm UTC](https://community.f5.com/t/ecc-ciphers-in-11-4-1/57166 "2015-06-01T16:07:55Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Mike\_Maher](https://avatars.discourse-cdn.com/v4/letter/m/9d8465/32.png) [@Mike\_Maher](https://community.f5.com/u/Mike_Maher)\
**Post date:** [June 1, 2015, 4:07pm UTC](https://community.f5.com/t/ecc-ciphers-in-11-4-1/57166/1 "2015-06-01T16:07:55Z")

</div>

I am having some trouble getting ECDHE ciphers to function. I am running 11.4.1 and have tried multiple cipher strings in the SSL profile, but I can’t seem to get them to appear when I scan the VIP. I always seem to get the AES-128-SHA and AES-256-SHA

Right now in prod I am running this on most of my servers. DEFAULT:!SSLv3:!RC4@STRENGTH

I tried adding the cipher suite but that didn’t do anything

DEFAULT:ECDHE+AES:!SSLv3:!RC4@STRENGTH

I also tried doing something a little more complex. However that didn’t really change anything either.

NATIVE:!MD5:!EXPORT:!3DES:!DES:!DHE:!SSLv3:!SSLv2@STRENGTH

The documentation says that ECC ciphers were available starting in 11.4.0. Any help would be appreciated.

---

<div class="post-metadata">

**Author:** ![nathe](https://avatars.discourse-cdn.com/v4/letter/n/eb8c5e/32.png) [@nathe](https://community.f5.com/u/nathe)\
**Post date:** [June 1, 2015, 4:26pm UTC](https://community.f5.com/t/ecc-ciphers-in-11-4-1/57166/2 "2015-06-01T16:26:02Z")

</div>

Mike,

What about if you run the following from the BIG-IP CLI?

tmm --clientciphers ‘DEFAULT:!SSLv3:!RC4:@STRENGH’ does this return possible ECDHE ciphers? My test rig is 11.5.1 and I do get ECDHE ciphers - but as you say they are included in 11.4.1.

Nothing else configured in the Client SSL Profile is there?

Hope this helps,

N