Check TLS versions used on a VMware vCenter Virtual Appliance

Problem:

I need to see which versions of TLS are being used on my VMware vCenter Virtual Appliance.

Solution:

We are using VCSA version 6.7 so TLS 1.0 and 1.1 should be disabled by default but this is how to check.

Login to the appliance and enable bash:

Command> shell.set --enabled true

 

Run the shell:

Command> shell

 

Then change directory to the TLS Configuration tool:

root@vcenter1 [ ~ ]# cd /usr/lib/vmware-TlsReconfigurator/VcTlsReconfigurator

 

Run the command to initiate the scan:

root@vcenter1 [ /usr/lib/vmware-TlsReconfigurator/VcTlsReconfigurator ]# ./reconfigureVc scan

 

You should then see a list of all your TLS versions

One Reply to “Check TLS versions used on a VMware vCenter Virtual Appliance”

  1. Hi I got CRM Application which supports TLS v1.1 at this moment and I got 2 CRM Application VMs running on ESXI 6.5 u3

    I want to upgrade my existing vCenter servers from v6.5u3q to v7.0u3 – and as you know that vSphere 7.0 supports only TLS v1.2
    After upgrading vCenter Servers I am planning to upgrade Prod and Dev Cluster running on ESXI 6.5u3 to v6.7u3.

    Q. what happen to CRM application and 2 VMs if If I am upgrading my above environment – Would CRM application will break ? what happen to those 2 CRM VMs now I am running on ESXI 6.7 host

    Thanks

Leave a Reply

Your email address will not be published. Required fields are marked *