Cipher used on collecter needs updating

Products

• CA Infrastructure Management
• CA Performance Management - Usage and Administration

Issue/Introduction

We have identified that the data collector is using a weak cipher. How do we go about updating the cipher used on the collector to a more secure cipher.

Environment

Release : 3.6

Component : IM Polling

Resolution

The Data Collector does installs the high encryption pack, so now arcfour256 is available as encryption method. This method should be used of your security team requires higher encryption. 

 Resolution: 

1. Edit the following file in apache-karaf-/etc/org.apache.karaf.shell.cfg 

Add the following line to the file: 

ciphers=aes256-ctr,aes128-ctr ​

2. Restart activemq and the dcmd process: 

service activemq stop

service dcmd stop 

service activemq start 

service dcmd start 

 NOTE: This change will need to be made after each upgrade of the product. This file is backed up to backup/apache-karaf/etc before we lay down a new version. But we don't restore the file.