23.2 Configure TLS Protocols

By default, NNMi supports the TLSv1.2 and TLSv1.3 protocols for HTTPS communication.

It is recommended that NNMi use only TLSv1.2 or later unless older, less secure, protocols are necessary for supporting legacy clients.

To change the protocols that NNMi uses, follow these steps:

1. Log on to the NNMi management server.

2. Open the following file with a text editor:

   • Windows: %NnmDataDir%nmsas\NNM\server.properties

   • Linux: /var/opt/OV/nmsas/NNM/server.properties

   In the case of NNMi in an HA configuration, please see "19.5.1 Data on the NNMi shared disk".

3. Adding or updating the com.hp.ov.nms.ssl.PROTOCOLS property with a comma-separated list of the protocols that you want to use.

   For example, if you want to use the TLSv1, TLSv1.1, TLSv1.2 and TLSv1.3 protocols, a configuration line similar to the following example should exist in the server.properties file:

   com.hp.ov.nms.ssl.PROTOCOLS=TLSv1.3,TLSv1.2,TLSv1.1,TLSv1

4. Restart the NNMi processes by running the following commands:

   • Windows:

     %NnmInstallDir%bin\ovstop -c
     %NnmInstallDir%bin\ovstart -c

   • Linux:

     /opt/OV/bin/ovstop -c
     /opt/OV/bin/ovstart -c

To Page Top