Troubleshooting ILOM Remote Console Access Problems

Asset ID:	1-72-2115407.1
Update Date:	2018-03-23
Keywords:

Solution Type Problem Resolution Sure

Solution 2115407.1 : Troubleshooting ILOM Remote Console Access Problems

Applies to:

Sun Blade X6270 M2 Server Module - Version Not Applicable and later
Information in this document applies to any platform.

Symptoms

Launching the ILOM Remote Console fails with the error below:

No appropriate protocol (protocol is disabled or cipher suites are inappropriate)

Changes

Updating Java on the client system to Java6u91, Java7u75, Java8u31 or later causes the issue.

Cause

Java6u91, Java7u75, Java8u31 or later no longer support SSLv3 by default.

Solution

Update ILOM to a version that supports TLS (ILOM 3.1.2.50, 3.2.4 or later)

or use the workaround below:

Re-enable SSLv3 in the $JAVA_HOME/jre/lib/security/java.security file on the client system as described in Doc ID 1968537.1

SSLv3 has been disabled by default due to security concerns.
Therefore it is considered best practice to only re-enable SSLv3 in a VM or VBox environment which is then only used for ILOM connections.

References

<BUG:20427033> - CAN'T USE REMOTE SYSTEM CONSOLE WHEN SSLV3 IS DISABLED IN JAVA
<NOTE:1968537.1> - 'No appropriate protocol' message is displayed when attempting to run ILOM Remote Console
<NOTE:1935986.1> - CVE-2014-3566 - Instructions to Mitigate the SSL v3.0 Vulnerability (aka "Poodle Attack") in ILOM

Attachments

This solution has no attachment