How to modify cipher algorithms used by KSC MDM server on listening ports [KSC Windows]

[Antipova Anna]

Advice and Solutions (Forum Knowledgebase) Disclaimer. Read before using materials.

 

The ability to modify the ciphers used by the product to communicate with port 13292 published on the Internet is required.

Step-by-step guide

You cannot change the ciphers used on a particular port, but you can change the cipher modes used by the MDM server on all listening ports.To do so, you will need to create a global variable KLTR_ENV_SSL_CIPHER_SUITE and restart Kaspersky Security Center server. 
You can familiarize yourself with the format of the values at this link https://www.openssl.org/docs/man1.0.2/man1/openssl-ciphers.html

For example, a variable might look like the following:

KLTR_ENV_SSL_CIPHER_SUITE=HIGH:!MD5:!DSS