tls-ems-enforced

Enables the use of EMS (Extended Master Secret) in TLS (Transport Layer Security) connections.
Syntax
tls-ems-enforced
no tls-ems-enforced
Command Default

Before executing the tls-ems-enforced command, the system allow TLS connections that do not use the EMS extension.

Parameters
tls-ems-enforced
Enables use of EMS in TLS.
Modes

Global Configuration Mode

Usage Guidelines

This command is supported on SmartZone controllers with FIPS mode enabled.

Examples

This example displays the tls-ems-enforced command.

device(config)# tls-ems-enforced
This command will restart some services. Do you want to continue (or input 'no' to cancel)? [yes/no] yes
Successful operation
% This configuration will take effective in a few minutes.

This example displays the No form of the tls-ems-enforced command.

device(config)# no tls-ems-enforced
This command will restart some services. Do you want to continue (or input 'no' to cancel)? [yes/no] yes
Successful operation
% This configuration will take effective in a few minutes.
History
Release version Command history
7.1.1.3 This command was introduced.
Parent topic: Commands Si - Z