11.6.1
3 TopicsChange weak HMAC
We've got a 5250 running 11.6.1 and the security scan pinged for Weak Ciphers and MAC's. I have been able to reset the Ciphers to 128bit or better but none of the MAC's I've tried are acceptable. When I edit the file and put hmac-sha2-256 (or 512) I get the error on exiting vi: "There were error. Continue editing(y) or discard changes(n) (y/n)". If I change the MAC back to hmac-sha1 it is accepted. So I know it is the MAC setting. I've looked and looked for anything on F5 pages about available MAC's and have found nothing that answers my questions. FYI we at limited how much we can upgrade, so hopefully it isn't a major version change. What non MD5 or SHA1 macs are available or what do I have to update/upgrade to get non-MD5/SHA1 macs.1.4KViews0likes5CommentsBIG-IP 11.6.1 iControl REST API access issues
Hi guys, I'm having issues with BIG-IP version 11.6.1 and iControl REST API. On previous versions I was able to create an administrator account on the BIG-IP and use it to access the iControl REST API. On version 11.6.1 it seems that this is not possible. The only account that I can use is the builtin admin account. Did any of you experience this issue and do you have any suggestions on how to solve this? Thanks in advanceSolved839Views0likes6Comments