I have been attempting to utilize the new default TLS settings in vCenter version 6.0U3 as outlined in the release notes:
VMware vCenter Server 6.0 Update 3 Release Notes
The goal is to permit customers to connect external devices for use with our web client plugin without enabling TLS 1.0 of course. Unfortunately, no external devices can be connected without first enabling 1.0 on the external device. To check the TLS settings, I downloaded the TLS reconfiguration tool, ran a scan and compared the results to a scan of a functional 6.5 vCenter that indeed permits exclusion of TLS 1.0 device connections. The only difference was 6.0 permitted 1.0, 1.1, 1.2 for the web client service, and was limited to 1.1 and 1.2 for vCenter 6.5. I used the reconfiguration tool successfully remove 1.0 and retried the connections, which again were denied unless I enabled 1.0 on the external device. I have attached a screenshot of the reconfiguration tool scan command. Thanks in advance for any hints. Matt A.
