Configure cipher suites to use for HTTPS (Optional)

Configure cipher suites that are used for HTTPS communication and disable the cipher suites that do not match your company policy.

For a list of supported ciphers for Database Security server 4.6.6 and later, click here.

For a list of supported ciphers for Database Security server 4.6.5 and earlier, click here.

Navigate to the directory where the configuration file server.xml is located:
<Server install root>\McAfee\Trellix Database Security\conf
Example: C:\Program Files\McAfee\Trellix Database Security\conf
Open server.xml file located in the conf directory.
Modify the SSL connector element by adding an attribute ciphers with a value of a comma-separated list of supported ciphers.
Restart Database Security server after the configuration change.

Sample configuration change

The following is a sample configuration change of the connector element in sever.xml.

<Connector port="8443" server="Trellix WebServer" maxHttpHeaderSize="8192" maxThreads="150" minSpareThreads="25" maxSpareThreads="75" enableLookups="false" disableUploadTimeout="true" acceptCount="100" scheme="https" secure="true" clientAuth="false" sslProtocol="TLS" keystore="C:\Program Files\McAfee\Trellix Database Security\httpsKeystore\.keystore" ciphers="SSL_RSA_WITH_RC4_128_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_DSS_WITH_AES_128_CBC_SHA, SSL_RSA_WITH_3DES_EDE_CBC_SHA, SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA, SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA" />