Cipher used on collecter needs updating
search cancel

Cipher used on collecter needs updating


Article ID: 135651


Updated On:


CA Infrastructure Management CA Performance Management - Usage and Administration


We have identified that the data collector is using a weak cipher. How do we go about updating the cipher used on the collector to a more secure cipher.


Release : 3.6

Component : IM Polling


The Data Collector does installs the high encryption pack, so now arcfour256 is available as encryption method. This method should be used of your security team requires higher encryption. 


1. Edit the following file in apache-karaf-/etc/ 

Add the following line to the file: 

ciphers=aes256-ctr,aes128-ctr ‚Äč

2. Restart activemq and the dcmd process: 

service activemq stop

service dcmd stop 

service activemq start 

service dcmd start 

 NOTE: This change will need to be made after each upgrade of the product. This file is backed up to backup/apache-karaf/etc before we lay down a new version. But we don't restore the file.