otama02

Tech Tip: When trying to access Workload Control Center (WCC) using Chrome v45 message  "Server has a weak ephemeral Diffie-Hellman public key" can bee seen.

Discussion created by otama02 Employee on Sep 16, 2015
Latest reply on Oct 13, 2015 by otama02

When trying to access Workload Control Center (WCC) using Chrome v45 the message:  "Server has a weak ephemeral Diffie-Hellman public key" can bee seen.

 

This message won't let the customers to access WCC GUI.

 

As of Chrome version 45, this error message is triggered if the SSL/TLS handshake attempts to use a public key smaller than 1024 bits.

 

In order to solve this problem please edit the Server.xml file from the paths:

C:\Program Files\CA\Workload Control Center\tomcat_32\conf\

and
C:\Program Files\CA\Workload Control Center\tomcat\conf

.......

ciphers="TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384,TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,TLS_RSA_WITH_AES_128_CBC_SHA256,TLS_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_256_CBC_SHA256,TLS_RSA_WITH_AES_256_CBC_SHA"

.......

After saving the files restart the CA WCC services

Outcomes