Configuring NNMi to Enable or Disable SSLv3 Ciphers

You can modify the NNMi list of ciphers. However, ensure that the original information is preserved by copying the properties file discussed in this section to a different directory. NNMi disables SSLv3 ciphers by default. You might need to enable SSLv3 ciphers to resolve web browser communication issues. For example, you might receive a connection error similar to one of the following:

• Secure Connection Failed
• This page can't be displayed

If you are also using NNM iSPI software that resides on the NNMi management server and you enable SSLv3 ciphers for NNMi, you must also enable SSLv3 for each iSPI .

When making file changes under High Availability (HA), the location of the server.properties file that you need to update is: <Shared_Disk>/NNM/dataDir/nmsas/NNM/server.properties.

To configure NNMi to enable SSLv3 ciphers:

1. Open the following file:

   Windows: %NnmDataDir%\nmsas\NNM\server.properties

   Linux: $NnmDataDir/nmsas/NNM/server.properties

2. Edit the following line:

   com.hp.ov.nms.ssl.PROTOCOLS = SSLv2Hello,TLSv1,TLSv1.1,TLSv1.2

   to include SSLv3. For example:

   com.hp.ov.nms.ssl.PROTOCOLS = SSLv2Hello,TLSv1,TLSv1.1,TLSv1.2,SSLv3

   Note You can remove any protocols contained in this line.

3. Save the file.

   Note If you are also enabling SSLv3 for one or more iSPIs, make those changes before stopping and starting the NNMi management server as described in the next steps.

4. Stop the NNMi management server:

   Run the ovstop command on the NNMi management server.

5. Re-start the NNMi management server:

   Run the ovstart command on the NNMi management server.

To disable the SSLv3 ciphers after they have been enabled:

1. Open the following file:

   Windows: %NnmDataDir%\nmsas\NNM\server.properties

   Linux: $NnmDataDir/nmsas/NNM/server.properties

2. Edit the following line:

   com.hp.ov.nms.ssl.PROTOCOLS = SSLv2Hello,TLSv1,TLSv1.1,TLSv1.2,SSLv3

   to remove SSLv3. For example:

   com.hp.ov.nms.ssl.PROTOCOLS = SSLv2Hello,TLSv1,TLSv1.1,TLSv1.2

3. Save the file.

   Note If you are also disabling SSLv3 for one or more iSPIs after it has been enabled, make those changes before stopping and starting the NNMi management server as described in the next steps.

4. Stop the NNMi management server:

   Run the ovstop command on the NNMi management server.

5. Re-start the NNMi management server:

   Run the ovstart command on the NNMi management server.