Skip to main content

Cryptography Setting

Use the information in this topic to understand different cryptography settings.

High Security Mode

  • Only support modern and strong ciphers.

  • NIST Compliant.

  • PFS-compliant (Perfect Forward Secrecy).

Compatibility Mode

  • Supports a wide range of cipher suits for maximum compatibility.

  • Non-PFS and Non-NIST compliant.

NIST Compliant Mode

  • Supports a wide range of cipher suits for maximum compatibility.

  • NIST compliant.

  • PFS compliant.

TLS Version Support

  • TLS 1.0 and higher

  • TLS 1.1 and higher

  • TLS 1.2 and higher

  • TLS 1.3

The TLS Cryptography Setting is to restrict the supported TLS cipher suites against BMC services.

Please refer to the following table for different setting TLS Cipher suites are supported

TLS Cipher ConfigurationTLS VersionTLS cipher suites

High Security Mode

TLS 1.3

  • TLS_AES_256_GCM_SHA384

High Security Mode

TLS 1.2

  • TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

  • TLS_DHE_RSA_WITH_AES_256_GCM_SHA384

  • TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384

NIST Compliant Mode

TLS 1.3

  • TLS_AES_256_GCM_SHA384

  • TLS_AES_128_GCM_SHA256

  • TLS_AES_128_CCM_8_SHA256

  • TLS_AES_128_CCM_SHA256

NIST Compliant Mode

TLS 1.2

  • TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

  • TLS_DHE_RSA_WITH_AES_256_GCM_SHA384

  • TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384

  • TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

  • TLS_DHE_RSA_WITH_AES_128_GCM_SHA256

  • TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256

Compatibility Mode

TLS 1.3

  • TLS_AES_256_GCM_SHA384

  • TLS_AES_128_GCM_SHA256

  • TLS_CHACHA20_POLY1305_SHA256

  • TLS_AES_128_CCM_8_SHA256

  • TLS_AES_128_CCM_SHA256

Compatibility Mode

TLS 1.2

  • TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

  • TLS_DHE_RSA_WITH_AES_256_GCM_SHA384

  • TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

  • TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256

  • TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256

  • TLS_DHE_RSA_WITH_AES_256_GCM_SHA384

Compatibility Mode

TLS 1.1

TLS 1.0

  • TLS_RSA_WITH_AES_256_CBC_SHA256

  • TLS_RSA_WITH_AES_128_CBC_SHA256

  • TLS_RSA_WITH_AES_128_CBC_SHA

  • TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA

  • TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA