Query regarding TLS configurations update

Identity Security Cloud (ISC) ISC Discussion and Questions
1

Regarding TLS configurations update, the steps provided in the SailPoint document is not much clear. Can someone explain?

https://community.sailpoint.com/t5/Identity-Security-Cloud-Updates/Action-Required-Update-TLS-Configuration-for-VA-Connectivity/ba-p/277336

Thank you.

2

Hello @Raghava_S ,

Please go through below documents

TLS Configuration on Virtual Appliances

Thanks

3

  1. identify targetted sources

  2. Better to work with infra team to update target system to sypport TLS that mentioned in the doc

  3. do test connections and aggregations

4

Hi @Raghava_S ,

SailPoint has enforced stricter TLS and encryption standards following a Java upgrade on the Virtual Appliance. Previously it was accepting TLS old versions which supports SHA - 1.

Please notify your app owner to check below things:

  • Use of TLS 1.2 or higher for all connections

  • Replacement of any SHA-1 certificates with SHA-256 or stronger

  • Valid and trusted certificates are installed (including full certificate chain)

  • No reliance on legacy or insecure protocols.

Thank you.

5

The following also best help you, do the following VA to list out sources

openssl s_client -connect server:port -tls1_2

6

Thus the above command gives information about TLS?

7

yes it will outputs Protocol and Cipher. Then based on that you can make a list and pass the info to infra or IT team to have TLS 1.2 with SHA-256 if it does not have