Customizing which protocols and/or ciphers are used by LiveUpdate Administrator

Products

• Endpoint Protection
• Endpoint Security

Issue/Introduction

The protocols and/or ciphers used by Symantec LiveUpdate Administrator(LUA) need to be customized.

Resolution

First, change the LUA communication protocol to HTTPS. Next, follow the steps below to adjust the protocols and/or ciphers used in server.xml and java.security.

To modify server.xml

1. Make a backup of C:\Program Files (x86)\Symantec\LiveUpdate Administrator\tomcat\conf\server.xml
2. Edit C:\Program Files (x86)\Symantec\LiveUpdate Administrator\tomcat\conf\server.xml.
3. Navigate to the SSLHostConfig section.
4. In the protocols= section, make the desired adjustments.
5. In the ciphers= section, make the desired adjustments.
6. Save the file.

To modify java.security

1. Make a backup of C:\Program Files (x86)\Symantec\LiveUpdate Administrator\jre\conf\security\java.security.
2. Edit C:\Program Files (x86)\Symantec\LiveUpdate Administrator\jre\conf\security\java.security.
3. Navigate to the jdk.tls.disabledAlgorithms= section and add any Algorithms that need to be disabled.
4. Save the file.

Restart the LUA Apache Tomcat service.  Log in to the LUA to confirm it's still accessible. 

If the wrong combination of protocol and ciphers are entered when editing server.xml and java.security, the LUA console may not load.  Revert the server.xml and java.security to the backed up files and make any adjustments necessary.