Kvik SH060, Руководство по сборке, Страница: 69 / 82

A P P E N D I X
D
Enhancing Security for Web UI
This appendix contains the following section:
• Enhancing Security for Web UI, page 63
Enhancing Security for Web UI
When connected through the Secured Socket Layer (SSL) protocol using HTTPS, the web UI uses the default
ciphers for the Java Virtual Machine (JVM). These ciphers usually include weak cipher session keys and can
affect system security. Therefore, you may want to adjust the ciphers to disable the use of weak ciphers in the
web UI.
To adjust the ciphers:
Step 1 Open the server.xml file in the install-path/tomcat/conf folder in your Cisco Prime Network Registrar installation folder.
Step 2
Add a ciphers statement to the HTTPS connector statement and list down the allowed ciphers as described in the following
example:
The values for port , keystoreFile , and keystorePass must match the values that you have configured in your
system.
Note
<Connector port="8443"
maxThreads="150" minSpareThreads="25" maxSpareThreads="75"
maxHttpHeaderSize="8192"
enableLookups="false"
disableUploadTimeout="true"
acceptCount="100" scheme="https" secure="true"
clientAuth="false"
Cisco Prime Network Registrar 9.1 Installation Guide
63