How to configure Flexnet Operations v12.11 to support only TLS communication?

Title

Summary

This article shows how to disable weak deciphers (including SSLv2/SSLv3) and only allow TLS to avoid security vulnerabilities.

Question

How to configure Flexnet Operations to support only TLS communication?

Answer

1. Locate the "Connector" section from the following server.xml file:
< ops_install_dir>\site\server\server\flexnet\deploy\jboss-web.deployer\server.xml

2. Ensure that the change is made in the "Connector" section that says "SSLEnabled=true":
===
<Connector port="8444" protocol="HTTP/1.1" SSLEnabled="true"
maxThreads="150" server="FNO Server"
scheme="https" secure="true" clientAuth="false"
keystoreFile="C:\FNO_TEAM_INSTALLS\FNO_WHITEHAT\site\bin\keystore.jks"
keystorePass="${flexnet.ssl.keystore.password}" sslProtocol = "TLS"
allowTrace="false" useBodyEncodingForURI="true"
ciphers="TLS_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_256_CBC_SHA,
TLS_DHE_RSA_WITH_AES_128_CBC_SHA,TLS_DHE_DSS_WITH_AES_128_CBC_SHA,
TLS_DHE_DSS_WITH_AES_256_CBC_SHA,TLS_DHE_RSA_WITH_AES_256_CBC_SHA"/>
===

3. Restart FNO server:
> flexnet stop
> flexnet start

Note 1: refer to the following on how to disable week ciphers on application servers:
===
FlexNetOperations_Installation.pdf ->
Configuring FlexNet Operations After Installation ->
Configuring FlexNet Operations for Secure Socket Layer ->
Configuring Secure Socket Layer in FlexNet Operations to Disable Weak Ciphers
===

Note 2: the order of cipher suites does not decide on the priority of those communication protocols;
they just indicate what protocols the application server supports (and communication using protocols
that are not listed in "ciphers" will get rejected).

Was this helpful?

Support Hub

Product

FlexNet Operations

Visibility

Guest

URL Name

how-to-configure-flexnet-operations-v12-11-to-support-only-tls-communication

Are you sure you want to cancel the case creation?

Case closed successfully

Action performed successfully

Upload Attachment

Maximum file size allowed is 3 MB.

File type not supported.

Supported file types:

Documents (.txt, .doc, .docx, .pdf), Images (.jpg, .png), Comma Separated Files (.csv) Speadsheets (.xlsx, .xls)

Are you sure you want to close this case

Get Hotline support

Products	Region	Phone Numbers
FlexNet Operations FlexNet Embedded FlexNet Publisher FlexNet Connect FlexNet Code Insight InstallAnywhere InstallShield	North America *	+1 630-332-2513 (toll) +1 877-279-2853 (toll-free in North America)
	Europe *	+44 1925 944367 (toll) +44 800 047 8642 (toll-free in Europe)
	Japan *	+81 3-4540-5335 (select option 2)
	Australia *	+61 3 9895 2177 +61 1800 560 603 (toll-free in Australia)
Usage Intelligence (formerly Revulytics) Compliance Intelligence	Please use the Case Portal to submit your support ticket or reach out to your Revenera contact.

Summary

Question

Answer

Related Articles

Please wait...

Case id: 00001065