# What is the REST API to check / uncheck checkbox client SSL profile custom cipher cipher string ?

**URL:** <https://community.f5.com/t/what-is-the-rest-api-to-check-uncheck-checkbox-client-ssl-profile-custom-cipher-cipher-string/59657>\
**Category:** Technical Forums\
**Tags:** icontrolrest, rest-api, security, ltm\
**Created:** [March 12, 2021, 4:54am UTC](https://community.f5.com/t/what-is-the-rest-api-to-check-uncheck-checkbox-client-ssl-profile-custom-cipher-cipher-string/59657 "2021-03-12T04:54:24Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Digambar](https://avatars.discourse-cdn.com/v4/letter/d/3e96dc/32.png) [@Digambar](https://community.f5.com/u/Digambar)\
**Post date:** [March 12, 2021, 4:54am UTC](https://community.f5.com/t/what-is-the-rest-api-to-check-uncheck-checkbox-client-ssl-profile-custom-cipher-cipher-string/59657/1 "2021-03-12T04:54:24Z")

</div>

Hello Team,

Looking for help to check/uncheck checkbox to enable disable custom cipher string.

Need REST API for the same. We are able to update the same using REST API, but cant disable/uncheck it.

 ![image_262987.png](https://d20hrnpixdzcsd.cloudfront.net/original/3X/3/9/392326c676161c9c6b9a181372bed35fd30b6387.png)

---

<div class="post-metadata">

**Author:** ![Satoshi\_Toyosa1](https://avatars.discourse-cdn.com/v4/letter/s/6de8d8/32.png) [@Satoshi\_Toyosa1](https://community.f5.com/u/Satoshi_Toyosa1)\
**Post date:** [March 24, 2021, 10:52pm UTC](https://community.f5.com/t/what-is-the-rest-api-to-check-uncheck-checkbox-client-ssl-profile-custom-cipher-cipher-string/59657/2 "2021-03-24T22:52:23Z")

</div>

The right-hand side checkbox is only for GUI to protect the configuration items from accidental overwriting, hence it does not present in tmsh or iControl REST API. The selection in the middle is also for GUI. When “Cipher Group” is selected, it shows a list of available (preconfigured) groups (and the text field disappears). When “Cipher String” is selected, you can specify the ciphers of your choice.

If you want to create a client-ssl profile with a specific cipher string, use the “ciphers” property: For example, run the following curl command to create a profile named “clientssl-sat” with the cipher string “AES” (others are all default inherited from clientssl).

```tcl
curl -sku <user:pass> https://<IP>/mgmt/tm/ltm/profile/client-ssl \
 -X POST -H "Content-type: application/json" \
 -d '{"name":"clientssl-sat", "ciphers":"AES"}'

```

To create a client-ssl from a cipher group, specify it to the “cipherGroup” property. Because you cannot specify both “ciphers” (by default, “DEFAULT”) and “cipherGroup” at the same time, you have to specify “none” to the “ciphers” property: e.g.,

```tcl
curl -sku <user:pass> https://<IP>/mgmt/tm/ltm/profile/client-ssl \
  -X POST -H "Content-type: application/json" \
  -d '{"name":"clientssl-sat", "cipherGroup":"f5-secure", "ciphers":"none"}'

```

---

<div class="post-metadata">

**Author:** ![Satoshi\_Toyosa1](https://avatars.discourse-cdn.com/v4/letter/s/6de8d8/32.png) [@Satoshi\_Toyosa1](https://community.f5.com/u/Satoshi_Toyosa1)\
**Post date:** [March 24, 2021, 11:08pm UTC](https://community.f5.com/t/what-is-the-rest-api-to-check-uncheck-checkbox-client-ssl-profile-custom-cipher-cipher-string/59657/3 "2021-03-24T23:08:32Z")

</div>

See also [**K10866411: Creating a custom cipher group using the Configuration utility**](https://support.f5.com/csp/article/K10866411)