Skip to content

TLS Cipher Suites

This page contains information about the TLS Cipher Suites used by the Connection Manager and Security Gateway, and instructions for restricting the full list to subsets if desired.

TLS Versions

The Connection Manager and Security Gateway supports TLS 1.2 and TLS 1.3.

Connection Manager TLS Cipher Suites

The Connection Manager supports the following cipher suites for the TLS connections from the Anyware client, to the connection broker, and to the Anyware Agent (in decreasing order of preference):

  • TLS_AES_256_GCM_SHA384
  • TLS_CHACHA20_POLY1305_SHA256
  • TLS_AES_128_GCM_SHA256
  • TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
  • TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
  • TLS_RSA_WITH_AES_256_GCM_SHA384
  • TLS_RSA_WITH_AES_128_GCM_SHA256

Security Gateway Supported TLS Cipher Suites

The Security Gateway supports the following cipher suites for TLS connections, in decreasing order of preference:

  • TLS_AES_256_GCM_SHA384
  • TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
  • TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
  • TLS_RSA_WITH_AES_256_GCM_SHA384
  • TLS_RSA_WITH_AES_128_GCM_SHA256