Return
-
Title
Enabling "TLS 1.2 Only" option on appliances -
Description
Enabling the TLS 1.2 Only option on Safeguard, the setting is only configured on the Primary appliance.
Settings | Appliance | Appliance Information | TLS 1.2 Only | Enabled switch.
-
Cause
This setting needs to be configured per appliance, the TLS 1.2 switch requires a reboot of the appliance that has this option enabled. -
Resolution
The TLS 1.2 setting needs to be enabled per appliance, and is not replicated from Primary to Replica.
On the Safeguard Desktop client prior to versions 6.0.8 and 6.8, the "TLS 1.2 Only" switch is greyed out when viewed from a Replica Appliance. As a workaround it is possible to manually change the value in the Safeguard API:
Navigate to the Replica Appliance APIhttps://<replica_hostname_or_IP>/service/appliance/swagger/ui/index#/Click Authorize and login with an account with admin permissionsGo to ApplianceStatus – SecureSSLUsing GET - check that the value returned is "false"Use the PUT and click ‘Try it out’Use the GET again to check the value is now "true"Restart the Replica appliance*Note* in the GUI it will still show as Disabled, however the API returns "True" -
Change Request
231622 -
Additional Information
Bug 231622 submitted to have the switch work in the GUI, and allow admin to enable the TLS 1.2 Only on Replica.