跳转到主内容

KTLS 支持哪些 ONTAP 密码

  1. 最后更新
  2. 另存为PDF
Views:
9
Visibility:
Public
Votes:
0
Category:
ontap-9
Specialty:
nas
Last Updated:

适用于

  • ONTAP 9.13.1 及更高版本
  • KTLS
  • S3

回答

ONTAP S3 支持以下协议：  

非 PSK-TLSv1.2

  • TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
  • TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
  • TLS_DHE_DSS_WITH_AES_256_GCM_SHA384
  • TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
  • TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
  • TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
  • TLS_DHE_DSS_WITH_AES_128_GCM_SHA256
  • TLS_DHE_RSA_WITH_AES_128_GCM_SHA256
  • TLS_RSA_WITH_AES_256_GCM_SHA384
  • TLS_RSA_WITH_AES_128_GCM_SHA256

PSK-TLSv1.2

  • TLS_DHE_PSK_WITH_AES_256_GCM_SHA384
  • TLS_PSK_WITH_AES_256_GCM_SHA384
  • TLS_DHE_PSK_WITH_AES_128_GCM_SHA256
  • TLS_PSK_WITH_AES_128_GCM_SHA256

TLSv1.3

  • TLS_AES_256_GCM_SHA384
  • TLS_AES_128_GCM_SHA256

  • 上述列表中未列出的密码套件不受 ONTAP S3 正式支持。
  • 确保至少配置了上述列表中的一个密码套件。
  • 虽然可能会为使用 security config配置其他协议，但它们不会对 ONTAP S3 构成安全风险，因为 TLS 连接只会使用列出的协议。
  • 选择这些支持的协议是因为它们具有高度的安全性和性能卸载能力。

追加信息

NetApp provides no representations or warranties regarding the accuracy or reliability or serviceability of any information or recommendations provided in this publication or with respect to any results that may be obtained by the use of the information or observance of any recommendations provided herein. The information in this document is distributed AS IS and the use of this information or the implementation of any recommendations or techniques herein is a customer's responsibility and depends on the customer's ability to evaluate and integrate them into the customer's operational environment. This document and the information contained herein may be used solely in connection with the NetApp products discussed in this document.