TLS Erro recevied
500 Connection refused‘ or ‘Controller not configured for secure management with tls‘
Symptoms
When the storage controller is connected through System Manager, two possible errors can be reported: ‘
500 Connection refused‘ or ‘Controller not configured for secure management with tls‘Cause
Increased security added to product. System Manager now requires Transport Layer Security (TLS) security to function.
Solution
TLS is disabled by default on the storage controllers. It must be explicitly enabled
To enable or disable TLS, run the following command:
options tls.enable {on|off} Perform the following steps:
- To enable TLS, set the option to ON.
- For TLS to take effect on HTTPS, ensure that the
httpd.admin.ssl.enableoption is also set to ON. - For TLS to take effect on FTPS, ensure that the
ftpd.implicit.enableoption or theftpd.explicit.enableoption is also set to ON. - For TLS to take effect on LDAP, ensure that the
ldap.ssl.enableoption is also set to ON.
On clustered Data ONTAP, by default SSLv3 is enabled. When SSL is configured or enabled, Transport Layer Security version 1.0 (TLSv1.0) is also enabled and cannot be disabled.
Credit Netapp