Enterprise Manager

Announcement

For appeals, questions and feedback about Oracle Forums, please email oracle-forums-moderators_us@oracle.com. Technical questions should be asked in the appropriate category. Thank you!

EM - Port 7101 - Weak ciphers and certificate

user13822832Nov 3 2015 — edited Nov 5 2015

Hi,

We were trying to setup EM 12.1.0.5 in our environment. As per the security best practices the certificate and ciphers used on port 7101 is weak and it should be changed. I am unable to find any documentation on how to do the same.

How can I replace the certificate used on port 7101 with a 2048 bit certificate and remove the below ciphers and use strong ciphers

Low Strength Ciphers (< 56-bit key)

TLSv1

EXP-EDH-RSA-DES-CBC-SHA Kx=DH(512) Au=RSA Enc=DES-CBC(40) Mac=SHA1 export

EXP-DES-CBC-SHA Kx=RSA(512) Au=RSA Enc=DES-CBC(40) Mac=SHA1 export

EXP-RC4-MD5 Kx=RSA(512) Au=RSA Enc=RC4(40) Mac=MD5 export

Medium Strength Ciphers (>= 56-bit and < 112-bit key)

TLSv1

EDH-RSA-DES-CBC-SHA Kx=DH Au=RSA Enc=DES-CBC(56) Mac=SHA1

DES-CBC-SHA Kx=RSA Au=RSA Enc=DES-CBC(56) Mac=SHA1

Any help would be greatly appreciated. I have been able to change the same for 7799.

Thanks in advance

Locked Post

New comments cannot be posted to this locked post.

Locked on Dec 3 2015

Added on Nov 3 2015

2 comments

813 views