TLS Version

Overview

By default, TLS versions 1.0, 1.1, 1.2, and 1.3 are enabled. You can configure a TLS Version rule to limit support to specified TLS versions.

Configure the Rule

Here, we'll describe how to configure the rule with the Delivery Service Management UI.

API Users may choose to build the site configuration offline.

To configure a TLS Version rule:

1. Navigate to the Select Rule dialog.

2. In the Select Rule dialog, choose TLS Version.

3. Select/unselect the relevant TLS versions.
   

4. Choose Add Rule.

SVTA Component: MI.CertificateMetadata

When you save the configuration version, the MI.CertificateMetadata component is added to the JSON configuration.

By default, TLS 1.0 is enabled in addition to the three protocols specified by the object in this example. In this case, the component is used to disable support for TLS version 1.0.

{
	"generic-metadata-type": "MI.CertificateMetadata",
	"generic-metadata-value": {
		"encryption-level": {
			"protocols": [
				"TLSv1.1",
				"TLSv1.2",
				"TLSv1.3"
			]
		}
	}
}

Supported protocol values:

• TLSv1.0
• TLSv1.1
• TLSv1.2
• TLSv1.3