Specifying the minimum Transport Layer Security (TLS) version requirement

Prev Next

Use the commands in this section to specify the minimum version requirement for Transport Layer Security (TLS) that should be used. The default is to use TLS v1.2.

To specify the required minimum TLS version using the CLI:
  1. Go to CLI configuration mode:

    hostname > enable
    hostname # configure terminal
  2. Specify the minimum TLS version requirement:

    hostname (config) # web server ssl min-version <value>

    where:

    • <value> is tls1 (TLS v1), tls1.1 (TLS v1.1), or tls1.2 (TLS v1.2). The default is tls1.2.

  3. Verify your change:

    hostname (config) # show web
  4. Save your changes:

    hostname (config) # write memory
To reset the minimum TLS version requirement to the default:
  1. Go to CLI configuration mode:

    hostname > enable
    hostname # configure terminal
  2. Reset the minimum TLS version requirement to the default (TLS v1.2):

    hostname (config) # no web server ssl min-version
  3. Save your changes:

    hostname (config) # write memory

Example

The following example sets the minimum TLS version requirement to TLS v1.2.

hostname (config) # web server ssl min-version tls1.2