Use the commands in this section to specify the minimum version requirement for Transport Layer Security (TLS) that should be used. The default is to use TLS v1.2.
To specify the required minimum TLS version using the CLI:
Go to CLI configuration mode:
hostname > enable hostname # configure terminal
Specify the minimum TLS version requirement:
hostname (config) # web server ssl min-version <value>where:
<value>istls1(TLS v1),tls1.1(TLS v1.1), ortls1.2(TLS v1.2). The default istls1.2.
Verify your change:
hostname (config) # show webSave your changes:
hostname (config) # write memory
To reset the minimum TLS version requirement to the default:
Go to CLI configuration mode:
hostname > enable hostname # configure terminal
Reset the minimum TLS version requirement to the default (TLS v1.2):
hostname (config) # no web server ssl min-versionSave your changes:
hostname (config) # write memory
Example
The following example sets the minimum TLS version requirement to TLS v1.2.
hostname (config) # web server ssl min-version tls1.2