Weak cipher suites detected even after changing the TLS profile of vCenter Server

Products

• VMware vCenter Server 8.0

Issue/Introduction

Even after changing the TLS profile to NIST_2024 using the procedure in KB 377237, security scans still detect weak cipher suites.

Environment

vCenter Server 8.0 U3

Cause

If the profile change is not completed on the vCenter Server side, weak cipher suites may be detected in security scans.

Resolution

Please wait until the TLS profile change is complete.
You can check the progress of the profile change by following the steps in KB 377237, "Using CURL to interact with TLS Profiles," or by using "TLS_PROFILE.sh."

Additional Information

Japanese KB: vCenter Server の TLS プロファイルを変更しても強度の弱い Cipher Suites が検出される