Set the recommended TLS version

Last updated

10:32, 27 Apr 2017
Save as PDF

Overview

Explains what the feature is or what its benefits are to the user or customer.

Feature

There are a couple of security vulnerabilities due to SSL certificates supporting older versions of TLS (Transport Layer Security). This procedure shows you how to set the recommended TLS version to avoid these vulnerabilities.

The PCI (Payment Card Industry) Data Security Standard and the FIPS 140-2 Standard require a minimum of TLS v1.1 and recommends TLS v1.2.

ThoughtSpot supports SSL v3, TLS v1.0, and TLS v1.1 for backwards compatibility. However, the recommended version is TLS v1.2. Therefore, to set the recommended TLS version:

Enable your web browser to support TLS v1.2. This can be done in your browser's advanced settings.
Log in to the Linux shell using SSH.
Issue the following command:
```
tscli security set-min-version 1.2
```
This will block all usage of older versions.