Configuring the MF Directory Server to use TLS Protocols and Cipher Suites

To configure an MF Directory Server to force the use of a cipher suite list:

1. Open the Enterprise Server Administration page.
2. In the left pane under Configure, click Security.
3. Click the MF Directory Server tab.
4. Check Restrict administration access.
5. In the Authenticated Client Sessions group, click Use encrypted connections.
6. In the Secure Ports field, type a port number.
   • Check Use custom server ID certificates.

     This enables you to specify a certificate and keyfile.

7. By default, the TLS honor server cipher list is checked. This forces clients to use the protocols and cipher suites specified in order of their priority.
   Note: If the TLS protocols and Cipher suites list are not specified then it uses the default. The TLS protocols field now supports TLS1.3. See Specifying a Server Protocol and Cipher Suite Preference for more information.
8. In the TLS protocols field, type the list of protocols in order of priority, for example:

   -ALL+SSL3+TLS1

9. In the Cipher suites field, type the list of cipher suites in order of priority, for example:

   HIGH:!SSLv2:!RC4:!aNULL@STRENGTH

10. Click OK.

See MF Directory Server Security for more information on configuration options.