vRealize Operations Manager disables SSLv2 and SSLv3 by default. You must disable weak protocols on all load balancers before you put the system into production.

Procedure

  1. Run the grep SSLProtocol /usr/lib/vmware-vcopssuite/utilities/conf/vcops-apache.conf | grep -v '#' command from the command prompt to verify that SSLv2 and SSLv3 are disabled.

    If the protocols are disabled, the command returns the following output: SSLProtocol All -SSLv2 -SSLv3

  2. To also disable the TLS 1.0 protocol, run the sed -i "/^[^#]*SSLProtocol/ c\SSLProtocol All -SSLv2 -SSLv3 -TLSv1" /usr/lib/vmware-vcopssuite/utilities/conf/vcops-apache.conf command from the command prompt.
  3. To restart the Apache2 server, run the /etc/init.d/apache2 restart command from the command prompt.