Mitigate the RSA key exchange vulnerability on ZSphere HTTPS port 443

Issue

Use this article to troubleshoot and mitigate an RSA key exchange vulnerability reported for ZSphere HTTPS port 443.

Symptoms

• A security scan reports that HTTPS on port 443 supports RSA key exchange.
• The target environment requires non-compliant cipher suite entries to be disabled.

Environment

• Product: ZVF
• Version: 4.x
• Component: ZSphere
• Affected object: HTTPS/security hardening
• Scenario: Security and certificate issues. Confirm the current version, deployment topology, storage type, and operation timeline.

Possible causes