Enhancing Security for Web UI
When connected through the Secured Socket Layer (SSL) protocol using HTTPS, the web UI uses the default ciphers for the Java Virtual Machine (JVM). These ciphers usually include weak cipher session keys and can affect system security. In case you want to harden the system, adjust the ciphers as below:
![]() Note |
The default installation of Cisco Prime Network Registrar 11.1 works with Transport Layer Security (TLS) 1.2. You can change the configuration to make it work with the older TLS versions, if needed. |
Procedure
Step 1 |
Open the server.xml file in the /var/nwreg2/{local | regional}/tomcat/conf folder. |
||
Step 2 |
Use the below recommended sslEnabledProtocols and ciphers, or configure it as per your security requirement. For more details, refer the tomcat SSL/TLS Configuration document available online.
|
||
Step 3 |
Restart Cisco Prime Network Registrar for the changes to take effect. |
![]() Note |
Cisco Prime Network Registrar 11.1 supports TLS 1.3 with below ciphers:
If you want to leverage TLS 1.3, you need to update the server.xml file appropriately and restart Cisco Prime Network Registrar. |