put
http://127.0.0.1:8080/security/cipherProfile
Updates an existing cipher profile with new cryptographic settings. The profile must be editable (built-in profiles like Default, FIPS, CSfC cannot be modified). If the profile is active, changes are immediately written to configuration files. Requires READ_WRITE role.
Validation Rules:
- Profile name: required, max 32 characters, must be unique
- Comments: optional, max 512 characters
- TLS cipher suites and named curves: required, use 'ALL' or specific values from /defaultCipherParameters
- TLS minDHParamKeySize: -1 (default) or 2048-4096 in 1024 increments
- Tunnel IKE minPskLength: 8-64 characters
- Certificate minRSAKeySize: -1, 2048, 3072, or 4096
- Certificate minEcKeyLen: -1, 256, 384, or 521
- All algorithm arrays must have at least one value
Related Endpoints:
- GET /defaultCipherParameters - retrieve valid algorithm values
- POST /validate - validate profile against appliance certificates
- POST /activate - activate a profile after updating
Recent Requests
Log in to see full request history
| Time | Status | User Agent | |
|---|---|---|---|
Retrieving recent requests… | |||
Loading…