How do I modify the minimum TLS version that
Site Recovery Manager
uses

You change the minimum version of TLS that

Site Recovery Manager

uses by modifying the envoy proxy settings.

Verify the version of TLS that Site Recovery Manager uses by running the following command

openssl s_client -connect

<srm-fqdn>

:443

By default

Site Recovery Manager

8.8 uses only TLS 1.2.

SSH to

/opt/vmware/envoy/conf/

Open the

envoy-proxy.yaml

file in a text editor and edit the following line with the required minimum version of TLS.

tls_params: tls_minimum_protocol_version: TLSv1_2

Save the changes and exit the editor.

Restart the envoy proxy service by running the following command.

systemctl restart envoy-proxy

If you modify the minimum version of TLS, you must change all the occurrences where you want the change to take effect.

VMware Site Recovery Manager 8.8