Skip to content
Log In

Docker Enterprise Universal Control Plane (UCP) must be configured to use TLS 1.2.

An XCCDF Rule

Description

By default docker UCP is configured to use TLS v1.2, if this setting is misconfigured, older protocols containing security weaknesses could be utilized. TLS requires a handshake between client and server which is where the TLS version utilized in the connection is negotiated. For DoD use cases, all TLS must be at version 1.2.

ID
SV-235874r627749_rule
Version
DKER-EE-006280
Severity
Medium
References
Updated

Remediation Templates

A Manual Procedure

This fix only applies to the UCP component of Docker Enterprise.

via CLI:

Linux (requires curl and jq): As a Docker EE Admin, execute the following commands from a machine that can communicate with the UCP management console. Replace [ucp_url] with the UCP URL, [ucp_username] with the username of a UCP administrator and [ucp_password] with the password of a UCP administrator.