Impact of changing Diffie-Hellman Key Exchange Algorithm keylength

Products

• DX Unified Infrastructure Management (Nimsoft / UIM)

Issue/Introduction

Primary and HA hub have the following key value in the registry.

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\KeyExchangeAlgorithms\Diffie-Hellman\

ClientMinKeyBitLength 0x00000200(512)

The required setting should be 2048 instead of 512.

Would changing the key to 2048 have any impact to any probes in the primary hub and primary HA hub?

 

UIM version: 20.4

robot version: 9.34

OS: Windows 2012R2

 

Secure hub is not used. Hub probe > General > settings > SSL , SSL setting Mode: Normal, Cipher Type: AES 256-SHA  is the current setting. 

 

Environment

Release : 20.4

Component : UIM - HUB

Resolution

There is no impact on any probes in UIM because of this change.