Enabling SSL on the Server

Before configuring SSL on the Site, you must configure SSL on the server. Specify SSL versions and ciphers before enabling SSL connections. After you have enabled SSL for the server, SSL connections can be enabled on the Site, Settings Template, and/or for each user. Each level can inherit the settings from the parent.

NOTE: To disable TLS 1.3 or any other TLS version, you must clear the check box for the protocol version from the Minimum Protocol Version box and not just clear all the cipher versions from the Resulting cipher list box. EFT must have at least one cipher suite enabled (under the Resulting cipher list window) that is compatible with the highest enabled TLS version (under the Minimum Protocol Version), else TLS/SSL connections will fail. See also TLS 1.3 Support.

To configure SSL

  1. In the administration interface, connect to EFT and click the Server tab.

  2. On the Server tab, click the server node that you want to configure.

  3. In the right pane, click the Security tab.

  4. Next to SSL security settings, click Configure. The TLS Settings dialog box appears.

    5. TLS Settings dialog box

  5. Select the check box of one or more ciphers/algorithms to use, or manually specify the ciphers. At least one cipher must be specified.

    • Only advanced users should manually specify ciphers.

    • SSL Cipher and Version-allowed settings affect ALL Sites on EFT.

    • For PCI DSS compliance, EFT checks for 128-bit or higher ciphers, and SSLv3 or greater, and no use of CCC or PROT-C.

    • A Certificate Authority (CA)-signed certificate establishes your validity better than a self-signed certificate.

    • For details of SSL when using FIPS mode, refer to FIPS-Certified Library.

  6. Click the arrows to arrange the ciphers in top-down priority. If more than one approved cipher is specified, and the connecting client has in its list one or more ciphers that are also on EFT’s approved list, EFT will select and use the cipher based on ordering (priority) shown in the list box.

  7. Click Apply to save the changes to EFT.