Skip to main content

PUT /nodes/tlsSettings

Use this method to modify the current TLS settings on one or more managed devices.

This method starts a job that runs in the background to perform the operation. The response header includes a URI in the form /tasks/{task_id} (for example, /tasks/12) that represents the job that is created to perform this request. You can use GET /tasks/{job_list} to monitor the status and progress of the job. If a job was not successfully started, refer to the response code and response body for details.

Attention
A successful response indicates that the request was successfully created and accepted by the management server. It does not indicate that the operation that is associated with the job was successful.

To modify the current cryptographic setting for the management server, use PUT /cryptoSettings.

Note
This REST API requires Lenovo XClarity Administrator v4.0.0 or later.
You can change the security settings for the following devices.
  • Lenovo ThinkSystem servers with Intel or AMD processors (except SR635 / SR655)
  • Lenovo ThinkSystem V2 servers
  • Lenovo ThinkSystem V3 servers with Intel or AMD processors
  • Lenovo ThinkEdge SE350 / SE450 servers
  • Lenovo System x servers

Authentication​

Authentication with username and password is required.

Request URL​

PUT https://{management_server_IP}/nodes/tlsSettings

Query parameters​

None

Request body​

AttributesRequired / OptionalTypeDescription
minTlsVersionClientRequiredStringMinimum TLS protocol version to use for client connections to other servers (such as the LDAP client). This can be one of the following values.
  • TLS1.2. Enforces TLS v1.2 cryptography protocols.
  • TLS1.3. Enforces TLS v1.3 cryptography protocols.
Note
  • For CMMs, this value is used for client connections (such as an LDAP client).
  • System x and CMM devices support only TLS v1.2.
minTlsVersionServerRequiredStringMinimum TLS protocol version to use for server connections (such as the web server). This can be the following value.

  • TLSv1.2. Enforces TLS v1.2 or later cryptography protocols.

Note
This attribute is supported only for CMMs.
uuidListRequiredString Should this be an array of strings?List of device UUIDs, separated by a comma
The following example modifies the TLS settings on two ThinkSystem servers with XCC2.
{
   "minTlsVersionClient": "TLSv1.2",
   "minTlsVersionServer": "TLSv1.2",
   "uuidList": "8923abcfa78e232,23423424bcde895864"
}

Response codes​

CodeDescriptionComments
200OKThe request completed successfully.
400Bad RequestA query parameter or request attribute is missing or not valid, or the operation is not supported. A descriptive error message is returned in the response body.
500Internal Server ErrorAn internal error occurred. A descriptive error message is returned in the response body.

Response body​

None