How to disable weak ciphers in SDC

Question:

Due to vulnerability security assessment we want to disable weak ciphers in SDC.

Answer:

Follow below steps to disable the AES128 bit algorithm

1.  cd $JAVA_HOME/jre/lib/security
2. Open java.security file
3.  And update the jdk.tls.disabledAlgorithms ​ property with the ciphers which we want to disable

jdk.tls.disabledAlgorithms=SSLv3, RC4, DES, MD5withRSA, DH keySize < 1024, \
EC keySize < 224, 3DES_EDE_CBC, anon, NULL,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,TLS_DHE_RSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_DHE_RSA_WITH_AES_128_GCM_SHA256

and restart the SDC service

     4. Run the below command to confirm the cipher is disabled or not

nmap --script ssl-enum-ciphers -p <port> <SDC hostname or IP>