Password Manager Pro TLS 1.2 Chipers Settings | WOTECH

Chippers Settings in TLS 1.2v in Password Manager Pro

Hello,

In this article, we will configure the PMP product to work only for TLSv1.2.
First, stop the PMP service and take a folder backup of the server or a snapshot of the server. Changes will be made to 3 different files; server.xml , gateway.conf and postgres_ext.conf.
- server.xml file is in <PMP-Home>\conf. Open the file and search for sslProtocol and change "TLS" to " TLSv1.2" (sslProtocol="TLSv1.2"). Then search for " ciphers= " and change the expression to the ones in the link below.
Change the same steps for other connectors that use port 7070. Finally, save and close.
-   gateway,conf file is in <PMP_Installation_Directory>conf. Open the file and search for sslProtocols=TLSv1,TLSv1.1,TLSv1.2 . Again, change this expression to sslProtocols=TLSv1.2 . Then search for "cipherSuites=" and replace it with the following.
TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
- The postgres_ext.conf file is in <PMP_Installation_Directory>/pgsql/ext_conf. Open the file and add the following chipers to the bottom of the page.

  • ssl_ciphers = 'ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GC M-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:DHE-DSS-AES256-GCM-SHA384:DHE-RSA-AES256-GCM-SHA 384:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:DHE-R SA-AES128-SHA256:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!3DES:!MD5:!PSK' ssl_prefer_server_ciphers = true
Save the file and start the service. After the service starts, do not forget to perform your RDP tests.

    • Related Articles

    • Password Manager Pro Time Zone Setup

      Hello, In this article, I will explain how you can change the time of the PMP application. This problem can be easily understood by comparing the time written in the report with the time of the machine when drawing a report. It can also be a solution ...

    • Web Extension Password Save Feature

      In order to enable the Password Save feature in Web Extension in PAM applications, the following steps must be performed. • Stop the PMP service on both the Primary and secondary servers. • Open the system_properties.conf file located in the ...

    • Servicedesk Plus - Changing Local Account Password Using Script

      Reset Local Authentication Password You can follow the steps below to activate local authentication when logging into the SDP portal or to easily change the password of accounts used with local authentication. How can you change the password of your ...

    • List of Groups is large to display

      Hello, When retrieving users or computers from AD in Password Manager Pro/PAM360 products, if there are too many items, you may see the error "List of Groups is large to display" on the screen. The following steps must be taken to resolve this error. ...

    • Dell BIOS Password Autoset Script - Easy Management

      This script will automatically set Dell BIOS passwords with the given arguments. Script Name : Manage-DellBiosPasswords.ps1 Script Type : ps1 Category : BIOS Platform : Windows Extract the file from the attached zip and run it via Endpoint You can ...