This is an old revision of the document!

Change Cipher on ESXi

KB Article: https://kb.vmware.com/s/article/79476

For port 443 (HTTPS) on ESXi

Connect to the ESXi host through SSH.
Take a backup of /etc/vmware/rhttpproxy/config.xml file.
Open the /etc/vmware/rhttpproxy/config.xml file in a text editor.
Find a line containing <cipherList>. If it doesn't exit, the user can create it within the XML structure:

    <config>
    <vmacore>
    <ssl>
    <cipherList>...</cipherList>
    </ssl>
    </vmacore>
    </config>

  
  Replace with this line:

  <code><cipherList>!aNULL:ECDHE+AESGCM:ECDHE+AES</cipherList></code>
   
  For changes to take effect, restart the rhttpproxy service using this command:

  <code bash>/etc/init.d/rhttpproxy restart</code>

Maybe if needed delete the

:ECDHE+AES

cipherList section too.

Change Cipher on ESXi

For port 443 (HTTPS) on ESXi

Page Tools