Home > Configuration > SSL > setsslprofile_allowlegacykdf

setsslprofile_allowlegacykdf

Use this method to set fIPS 140-3 certification requires all handshakes without EMS be blocked.
Such KDFs are allowed by default. This setting is to allow/disallow such legacy KDFs
when needed. This setting applies to both frontend and backend SSL profiles.

Syntax



Parameters

name

Name for the SSL profile. Must begin with an ASCII alphanumeric or underscore (_) character, and must contain only ASCII alphanumeric, underscore, hash (#), period (.), space, colon (:), at (@), equals (=), and hyphen (-) characters. Cannot be changed after the profile is created.
This is mandatory parameter.

allowlegacykdf

FIPS 140-3 certification requires all handshakes without EMS be blocked. Such KDFs are allowed by default. This setting is to allow/disallow such legacy KDFs when needed. This setting applies to both frontend and backend SSL profiles.
Default value = YES.
Possible Values : YES, NO.

Return Value

Returns simpleResult

See Also