Security vulnerability identified on OnTap Select Deploy
Applies to
- ONTAP Deploy
- Security Vulnerability
Issue
Security scan reported the vulnerability(QID 38863) on the Deploy Utility.
The SSL/TLS server supports key exchanges that are cryptographically weaker than recommended. Key exchanges should provide at least 224 bits of security, which translates to a minimum key size of 2048 bits for Diffie Hellman and RSA key exchanges.
Solution:Change the SSL/TLS server configuration to only allow strong key exchanges.