topic Hi Leo, i have run above in Wireless

Server has a weak ephemeral Diffie-Hellman public key ERR_SSL_WEAK_SERVER_EPHEMERAL_DH_KEY

karinn001 — Mon, 05 Jul 2021 10:53:19 GMT

Hi,

I have Cisco Prime and i am getting the following error when i am going to login. I have used IE,Chrome, Firefox but have the same condition.Kindly let me the solution.

Server has a weak ephemeral Diffie-Hellman public key

ERR_SSL_WEAK_SERVER_EPHEMERAL_DH_KEY

This is due to Bug ID

Leo Laohoo — Tue, 08 Sep 2015 07:17:30 GMT

This is due to Bug ID CSCuj42438 & CSCuv21820.

IE works. There are workarounds to use Firefox & Chrome.

Hi all,

katerina.dardoufa — Tue, 08 Sep 2015 08:57:37 GMT

Hi all,

can anyone point to the workaround for Chrome?

For Mozilla I have found this:

on the url type:

about:config

Here in this config page, you will find a list of boolean entries. Search for below two entries,

security.ssl3.dhe_rsa_aes_128_sha

security.ssl3.dhe_rsa_aes_256_sha

By default, these are set to TRUE. But you have to set them to FALSE in order to allow the less secured pages.

For Chrome, use this shortcut

Leo Laohoo — Wed, 09 Sep 2015 03:10:36 GMT

For Chrome, use this shortcut:

C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --cipher-suite-blacklist=0x0088,0x0087,0x0039,0x0038,0x0044,0x0045,0x0066,0x0032,0x0033,0x0016,0x0013

Hi Leo, i have run above

karinn001 — Wed, 09 Sep 2015 05:07:53 GMT

Hi Leo,

i have run above command but result has not change. Still getting the same message.

Thank you!!!!It works fine!

katerina.dardoufa — Wed, 09 Sep 2015 06:48:07 GMT

Thank you!!!!

It works fine! Really appreciate your help!

Best Regards,

Katerina

Create a new shortcut and use

Leo Laohoo — Wed, 09 Sep 2015 06:55:08 GMT

Create a new shortcut and use the link provided to run the program. Make sure Chrome is in the right location of the folder.

Happy to hear the solution

Leo Laohoo — Wed, 09 Sep 2015 06:56:59 GMT

Happy to hear the solution works, Katerina. 🙂

How do you turn on HTTP

Dave D'Orazio — Thu, 10 Sep 2015 18:53:41 GMT

How do you turn on HTTP access to Prime? Not worried about security because the entire infrastructure sits behind a firewall.

Just use IE or hack Firefox isn't a great fix when there are many multiple users accessing Prime.

Hi, Here is a link to an

Bigoncisco — Fri, 11 Sep 2015 02:58:24 GMT

Hi, Here is a link to an excellent explanation about the error.

Does anyone have the string

Donald Case — Wed, 16 Sep 2015 20:39:30 GMT

Does anyone have the string OSX? No joy with: /Applications/Google\ Chrome.app/Contents/MacOS/Google\ Chrome --cipher-suite-blacklist=0x0088,0x0087,0x0039,0x0038,0x0044,0x0045,0x0066,0x0032,0x0033,0x0016,0x0013

Issue resolved. Thanks Leo

karinn001 — Thu, 17 Sep 2015 04:02:27 GMT

Issue resolved. Thanks Leo

Thanks for taking the time to

Leo Laohoo — Thu, 17 Sep 2015 14:07:13 GMT

Thanks for taking the time to rate our posts. 🙂

Maybe I'm just really missing

jordan.cox — Thu, 24 Sep 2015 14:54:10 GMT

Maybe I'm just really missing something, but when I try to create a new shortcut with the following path it says it can't find C:\Program application.

C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --cipher-suite-blacklist=0x0088,0x0087,0x0039,0x0038,0x0044,0x0045,0x0066,0x0032,0x0033,0x0016,0x0013

However, if I just enter C:\Program Files (x86)\Google\Chrome\Application\chrome.exe the shortcut will work fine. So I definitely have the correct path to the chrome app. What am I missing?

Hi Leo, Creating this new

aleopoldie — Thu, 24 Sep 2015 15:04:37 GMT

Hi Leo,

Creating this new shortcut is a risk for the global security of the browser, isn't it ? Is there any other modifications we can make to improve the Prime's security ?

Is it solved with the 8.0.120.0 code ?

Regards,

To make it work you need to

kconrad01 — Thu, 24 Sep 2015 16:52:01 GMT

To make it work you need to put quotes around the file path and name. So put a " in front of C: and replace the " right after the .exe with another double quote character.

"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --cipher-suite-blacklist=0x0088,0x0087,0x0039,0x0038,0x0044,0x0045,0x0066,0x0032,0x0033,0x0016,0x0013

Ah, thanks kconrad01 that

jordan.cox — Fri, 25 Sep 2015 19:25:10 GMT

Ah, thanks kconrad01 that worked!

Hi Leo, Is there a risk for

aleopoldie — Wed, 30 Sep 2015 22:03:06 GMT

Hi Leo,

Is there a risk for the browser's security if we create thos shortcut ?

So.. im still getting the

Luis Diaz — Thu, 01 Oct 2015 14:46:16 GMT

So.. im still getting the error after adding the cipher suites blacklist..

Here is a straight paste of my target destination.

"C:\Program Files\Google\Chrome\Application\chrome.exe" --cipher-suite-blacklist=0x0088,0x0087,0x0039,0x0038,0x0044,0x0045,0x0066,0x0032,0x0033,0x0016,0x0013

It open's Chrome but when i visit Cisco Prime still get the lovely error... any thoughts?

Had the same issue when I

nathan.a.reeves — Fri, 02 Oct 2015 07:10:41 GMT

Had the same issue when I created the shortcut. Make sure that after you've created the shortcut, go to task manager and ensure all chrome.exe processes are terminated.

As soon as I terminated all the running chrome processes, the next time I used the modified shortcut the pages loaded fine. (Accessing UCCX Admin Pages)