topic Re: Upgrade to TLS 1.2/1.3 on WLC and disable version 1.2 in Wireless

Upgrade to TLS 1.2/1.3 on WLC and disable version 1.2

brazju — Fri, 11 Nov 2022 15:14:39 GMT

I find I am not getting many answers for this online, but I am tasked with upgrading the TLS version on a few wireless devices and am stuck on how to actually do it. Is there a simple one/two shot command for this?

Re: Upgrade to TLS 1.2/1.3 on WLC and disable version 1.2

balaji.bandi — Fri, 11 Nov 2022 18:13:27 GMT

the question is confusing here ? Upgrade to TLS 1.2/1.3 on WLC and disable version 1.2

Iis this for WLC web access or for clients ?

what WLC controller you have ? what version code running ?

Re: Upgrade to TLS 1.2/1.3 on WLC and disable version 1.2

Mark Elsen — Fri, 11 Nov 2022 18:13:33 GMT

- You can't 'upgrade the TLS' (separately) on a WLC wireless controller, the only thing you can do is use a recent software version on the controller , then you may for instance issue :

(WLC) >config network secureweb cipher-option high ?

(examine and or use the further give options according to your needs)

Re: Upgrade to TLS 1.2/1.3 on WLC and disable version 1.2

Rich R — Mon, 14 Nov 2022 15:49:55 GMT

Agreed with @Mark Elsen you would have to upgrade to appropriate software version and apply the correct config.
And your question doesn't make sense because you say you want to upgrade to TLS 1.2 *and* disable TLS 1.2 - which one is it - upgrade or disable?
As @Mark Elsen said it really all depends which controller model you are using and what version of software it's running.
I don't think AireOS supports TLS 1.3 at all.
9800 (IOS-XE) supports TLS 1.3 as of version 17.9 as per https://twitter.com/DarchisNicolas/status/1564207080139112450?s=20&t=rErTXSKQPZXZfjeUjAtDrw and confirmed by @Rasika Nayanajith https://mrncciew.com/2022/08/30/9800-packet-captures/