Cipher used on collecter needs updating
search cancel

Cipher used on collecter needs updating

book

Article ID: 135651

calendar_today

Updated On:

Products

CA Infrastructure Management CA Performance Management - Usage and Administration

Issue/Introduction

We have identified that the data collector is using a weak cipher. How do we go about updating the cipher used on the collector to a more secure cipher.


Environment

Release : 3.6

Component : IM Polling

Resolution

The Data Collector does installs the high encryption pack, so now arcfour256 is available as encryption method. This method should be used of your security team requires higher encryption. 


 Resolution: 

1. Edit the following file in apache-karaf-/etc/org.apache.karaf.shell.cfg 


Add the following line to the file: 

ciphers=aes256-ctr,aes128-ctr ‚Äč


2. Restart activemq and the dcmd process: 


service activemq stop

service dcmd stop 

service activemq start 

service dcmd start 


 NOTE: This change will need to be made after each upgrade of the product. This file is backed up to backup/apache-karaf/etc before we lay down a new version. But we don't restore the file.