For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

JD1's avatar
JD1
Icon for Altostratus rankAltostratus
Dec 13, 2017
Solved

TMUI / Configuration WebUI - TLS/SSL Configuration - ECDHE

Hi All, I'm currently using BIG-IP 11.6.2 HF1. I'm required to secure the Management WebUI ciphers offered out. I'd prefer to drop all key exchange methods except for ECDHE. However, it seems...
BIG-IP
ecdhe
security
TMOS
tmui
  • nitass's avatar
    nitass
    Dec 21, 2017

    But the point being is that the command sys httpd ssl-ciphersuite on 11.6.x, doesn't seem to then correctly configure Apache services to use this for the TMUI.

     

    i understand this has been corrected in 12.0.

     

nitass_89166's avatar
nitass_89166
Icon for Noctilucent rankNoctilucent
Dec 21, 2017

But the point being is that the command sys httpd ssl-ciphersuite on 11.6.x, doesn't seem to then correctly configure Apache services to use this for the TMUI.

 

i understand this has been corrected in 12.0.

 

JD1's avatar
JD1
Icon for Altostratus rankAltostratus
Dec 21, 2017

Yes, it has. I have tested that. It looks like my only option.

 

That's fine, just a bit more planning.