KB-7922: What Potential Issues Might Arise if SSLv3 is Disabled After Installing CPS?

LOGIN TRY IT NOW

Tips for finding Knowledge Articles

- Enter just a few key words related to your question or problem
- Add Key words to refine your search as necessary
- Do not use punctuation
- Search is not case sensitive
- Avoid non-descriptive filler words like "how", "the", "what", etc.
- If you do not find what you are looking for the first time,reduce the number of key words you enter and try searching again.
- Minimum supported Internet Explorer version is IE9

Home >

KB-7922: What Potential Issues Might Arise if SSLv3 is Disabled After Installing CPS?

Product:

Centrify Privilege Service ,

Published:

22 December,16 at 12:28 AM

Rating:

Applies to: All versions of Centrify Privileged Service

Question:
What Potential Issues Might Arise if SSLv3 is Disabled After Installing CPS?

Answer:
SSLv3 is known to be susceptible to attacks such as POODLE. CPS on Premise only requires TLSv1 and higher to work, so we can disable SSLv3 as a matter of caution by setting the below registry key to 0.

HKLM\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 3.0\Server\Enabled