Dell Unity: How to Disable TLS 1.0 and 1.1 on Unity Array (2024)

Facts:
Unity 4.3 and later
Disabling TLS 1.0 is not available on Unity Operating Environment 4.2.1 or earlier.

Procedure:
This procedure is run using UEMCLI as service user.

1. Show the current settings with the command:

   uemcli -u admin -password <Your Password> /sys/security show

2. Disable TLS 1.0 with the command:

   uemcli -u admin -password <Your Password> /sys/security set -tlsMode TLSv1.1

   Alternatively, you can disable TLS 1.0 and 1.1 by setting -tlsMode TLSv1.2.

   uemcli -u admin -password <Your Password> /sys/security set -tlsMode TLSv1.2

In case the array is running OE 4.3 to 5.0, disable TLS 1.0 by using the below steps:

1. Show the current settings with the command:

   uemcli -u admin -password <Your Password> /sys/security show

2. Disable TLS 1.0 with the command:

   uemcli -u admin -password <Your Password> /sys/security set -tls1Enabled no

   Example for the above commands:

   XXXXX spb:~> uemcli -u admin -password Password1234# /sys/security showStorage system address: 127.0.0.1Storage system port: 443HTTPS connection1: FIPS 140 mode = disabled TLS mode = TLSv1.0 and above Restricted shell mode = enabledXXXXXspb:~> uemcli -u admin -password Password1234# /sys/security set -tlsMode TLSv1.1Storage system address: 127.0.0.1Storage system port: 443HTTPS connectionPlease refer to the Security Configuration Guide for backward compatibility.This change may impact running operations (e.g. replication) and the management services will be automatically restarted for the change to take effect.Do you want to continue?yes / no: yesOperation completed successfully.XXXXXspb:~> uemcli -u admin -password Password1234# /sys/security showStorage system address: 127.0.0.1Storage system port: 443HTTPS connection1: FIPS 140 mode = disabled TLS mode = TLSv1.1 and above Restricted shell mode = enabled

   If the user has special characters in the password, use the below commands. When prompted for the password, enter the user password with special characters:

   uemcli -u admin -securepassword /sys/security showuemcli -u admin -securepassword /sys/security set -tlsMode TLSv1.2

Additional information:

• This procedure restarts management server. You must wait until you can run the show command again (and login to Unisphere).
• This change may impact running operations which use management servers (for example, replication).
• If you are unable to log in to Unisphere with LDAP user after disabling TLS 1.0, seearticle Dell Unity: Unisphere UI fails to log in as LDAP User with error "The logged in user is not authorized to access Unisphere" when TLS1.0 is disabled at LDAP Server [Dell Correctable].