Enable or Disable TLS on Object Storage Extension

Products

• VMware Cloud Director

Issue/Introduction

This article explain steps to disable or enable specific version of TLS protocols for Object Storage Extension 3.x

Environment

Object Storage Extension 3.x

Resolution

• Open SSH connection to the OSE VM.
• Execute the following command to enable a particular protocol:

ose args set --k server.ssl.enabled-protocols --v Protocol_name1,Protocol_name2

Example: ose args set --k server.ssl.enabled-protocols --v TLSv1.2,TLSv1.3

• Restart the OSE service:

ose service restart

• To revert the changes:

ose args del --k server.ssl.enabled-protocols

ose service restart

Additional Information

Some 3rd party security scans or audits might report certain TLS versions as deprecated.

The default value is server.ssl.enabled-protocols=TLSv1.1,TLSv1.2,TLSv1.3