Quantcast
Channel: All Server Management - Systems Insight Manager posts
Viewing all articles
Browse latest Browse all 4342

Re: HP System Management Homepage and SSL Server Allows Anonymous Authentication Vulnerability issue

$
0
0

Hi,

 

we have already found a solution for this issue running the SMH on Windows. The think is to allow only SSL ciphers that does not allow anonymous key exchange. It is the “RC4” cipher for example.  You can read more about this in HP SMH documentation (http://h20628.www2.hp.com/km-ext/kmcsdirect/emr_na-c02779581-2.pdf

 

Our steps to get rid of this issue was following:

 

1) navigate to installation directory of HP SMH. Default is C:\hp\hpsmh\bin on Windows
2) Modify the SSL cipher suite by running command "smhconfig.exe -Z 'RC4-SHA'"
3) Restart the HP WEB server by running command "smhconfig.exe -r"

 

hope that helps

 

David

 


Viewing all articles
Browse latest Browse all 4342

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>