If you disable a version of TLS for Update Manager Port 9087 and you encounter problems, you can reenable the version. The process is different for reenabling port 8084.

About this task

Reenabling an earlier version of TLS has security implications.

Procedure

  1. Stop the vSphere Update Manager service.
  2. Navigate to the Update Manager installation directory which is different for 6.0 and 6.5.

    Version

    Location

    vSphere 6.0

    C:\Program Files (x86)\VMware\Infrastructure\Update Manager

    vSphere 6.5

    C:\Program Files\VMware\Infrastructure\Update Manager

  3. Make a backup of the jetty-vum-ssl.xml file and open the file.
  4. Remove the TLS tag that corresponds to the TLS protocol version that you want to enable.

    For example, remove <Item>TLSv1.1</Item> in the jetty-vum-ssl.xml file to enable TLSv1.1.

  5. Save the file.
  6. Restart the vSphere Update Manager service.