Configure Cryptographic Protocols for HTTPS Communication

By default, NNMi supports the TLSv1.2 protocol for HTTPS communication.

It is recommended that NNMi use only TLSv1.2 unless older, less secure, protocols are necessary for supporting legacy clients.

To configure NNMi to use protocols other than TLSv1.2, follow these steps:

1. Log on to the NNMi management server.

2. Open the following file with a text editor:

   • Windows:

     %NnmDataDir%\nmsas\NNM\server.properties

   • Linux:

     /var/opt/OV/nmsas/NNM/server.properties

3. Adding or updating the com.hp.ov.nms.ssl.PROTOCOLS property with a comma-separated list of the protocols that you want to use.

   For example, if you want to use the TLSv1, TLSv1.1, and TLSv1.2 protocols, make sure the following line exists in the server.properties file:

   com.hp.ov.nms.ssl.PROTOCOLS=TLSv1.0,TLSv1.1,TLSv1.2

4. Restart the NNMi processes by running the following commands:

   • On Windows:

     1. %nnminstalldir%\bin\ovstop -c
     2. %nnminstalldir%\bin\ovstart -c

   • On Linux:

     1. /opt/OV/bin/ovstop -c
     2. /opt/OV/bin/ovstart -c

Application Failover

In an application failover environment, NNMi always uses TLSv1.2 for communication between the NNMi management servers. This setting is not configurable.