Modifications required when FIPSOperationMode set to 1 (Basic)
Due to a recent security update, customers who have the non-default
FIPSOperationMode=1
set in their Tm1s.cfg should remove or
deprioritize the TLS RSA CipherSuites for a successful handshake to occur. Note that the default for
this parameter is FIPSOperationMode=2
.
This includes all CipherSuites that are prefixed with TLS_RSA_
. This also means
that TLS V1.2 and/or higher must be enabled, as TLS 1.1 and lower do not support alternatives. In
the case of TLS V1.2, the ECDHE CipherSuites must also be enabled.