Disabling the cipher suites for RSA key exchange on the SVP

System Administrator Guide for VSP E990 and VSP G130, G/F350, G/F370, G/F700, G/F900

Version

88-08-0x

Audience

anonymous

Part Number

MK-97HM85028-11

Use the following procedure to disable the cipher suites for RSA key exchange.

Note: If you disable the cipher suites for RSA key exchange on the SVP, make sure to set the cipher suites for RSA key exchange to be disabled on the GUM. (Select not to use TLS_RSA_WITH_AES_128_CBC_SHA256 or TLS_RSA_WITH_AES_128_CBC_SHA.)

Open a command prompt on the SVP with administrator permissions.
Move the current directory to the folder containing the tool.
```
cd /d C:\Mapp\wk\Supervisor\MappIniSet
```
"C:\Mapp" indicates the installation folder for the storage management software and SVP software. If the installation folder was set to a folder other than "C:\Mapp", replace "C:\Mapp" with the specified installation folder.
Run the following command:
```
MappRSAKeyExchangeDisable.bat
```
It takes approximately five minutes until this command finishes. Please wait without closing the command prompt window until the message appears in the window.

If you run this command, the services of some storage systems in the Storage Device List restart. The restart of services is applied to the storage systems for which Starting Service of the device icon is in Auto state. If you run this command while the services of the storage systems for which Starting Service is in Manual state are running, the services will be stopped. In this case, start the services. If you run this command while the services of the storage systems for which Starting Service is in Auto state are stopped, the services will be started.

If the message "21041-006005" appears while the services are restarting, click Close and wait until startup of the services finishes.
When the message "Press any key to continue…" appears, press the Enter key.
Run the following command to check whether the cipher suites for RSA key exchange were disabled:
```
MappRSAKeyExchangeState.bat
```
If the message "RSAKeyExchangeStatus=Disable" appears, it indicates that the cipher suites for RSA key exchange were disabled. Press the Enter key.
If the message "RSAKeyExchangeStatus=Enable" appears, it indicates that the cipher suites for RSA key were not disabled. Press the Enter key, and then try again from step 3.
Close the command prompt window.