IAM Server Security

SSL Security

The IAM service is preconfigured to use the TLS 1.2 cipher suites listed below. This is currently not configurable. Administrators who require more control over their TLS configuration should deploy a proxy in front of the IAM service and manage the external facing TLS configuration at the proxy.

• ECDHE-RSA-AES256-SHA384
• DHE-RSA-AES256-SHA384
• ECDHE-RSA-AES256-SHA256
• DHE-RSA-AES256-SHA256
• ECDHE-RSA-AES128-SHA256
• DHE-RSA-AES128-SHA256
• HIGH
• !aNULL
• !eNULL
• !EXPORT
• !DES
• !RC4
• !MD5
• !PSK
• !SRP
• !CAMELLIA

A description for the ciphers can be found here.