CommScope RUCKUS Community Forums

james_hicks_1ll · ‎11-12-2018

Is it possible to disable TLS 1.0 on the Zonedirector ZD1200 firmware version 10.1?

sanjay_kumar · ‎02-07-2024

Hi @ALI

Yes, you can use the same procedure to disable TLS 1.0 and 1.1 on the ZD

To check the version on the AP CLI:
rkscli: get tls-version
Minimum TLS Version: tlsv1
OK

To disable tls 1.0 on the AP, set the tls to 1.1 or 1.2 with the below command.
rkscli:set tls-version tlsv1.2

To disable the tls version 1.0 on the Zone director, use the below command.

ruckus> en
ruckus# debug
You have all rights in this mode.
ruckus(debug)# no support-tls 1.0
Are you sure you want to change whether support TLSv1.0, If yes, it will reboot ZoneDirector.[Y/n]

Note: ZD will reboot.

After the ZD reboot, use the command "no support-tls 1.1" to disable TLS 1.1

View solution in original post

sanjay_kumar · ‎01-24-2021

Hi Robert,

"get tls-version" is a AP command.

After disabling the tls1.1, could you please get us the output of this command from AP?

robert_lee_joc5 · ‎01-24-2021

rkscli: get tls-version
Minimum TLS Version: tlsv1
OK

Allowed me to
openssl s_client -connect x.x.x.x:22 -tls1

openssl s_client -connect x.x.x.x:22 -tls1_1
openssl s_client -connect x.x.x.x:22 -tls1_2

robert_lee_joc5 · ‎01-24-2021

I was able to set tls-version tlsv1.2 on all my access points.

Thank you.

sanjay_kumar · ‎01-24-2021

Hi Robert,

Thanks for the update. The below output showed that the TLS was still set to TLS1.0.

rkscli: get tls-version
Minimum TLS Version: tlsv1

However, now I see that you are able to set it correctly.

Glad to hear that the issue is resolved.

jpums · ‎02-23-2023

Hi SanJay,

If we can change the TLS from 1.0 to 1.2 of AP, does it affect the smartzone?

Thank you.