Article - CS355705

Users are unable to have Windchill Desktop Integration (DTI) connect to Windchill after adding strong SSLCipherSuite to the Apache configuration file in Windchill

Modified: 31-Mar-2024   


Applies To

  • Windchill PDMLink 12.0

Description

  •  After adding the following SSL Cipher Suite  in 20-mod_ssl.conf on Windchill server's Apache web server  based on customer  IT department's required  :
 
SSLCipherSuite TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-CHACHA20-POLY1305!DSS
SSLHonorCipherOrder on
SSLCompression off
SSLSessionTickets off

SSLProtocol All -SSLv2 -SSLv3 -TLSv1.1 -TLSv1
 
  •   Windchill URL can be accessed via  Chrome and Edge browser
  •   Windchill URL  can be accessed via Internet Explorer on Windows 10 desktop  and Windchill DTI works on Windows 10 desktop 
  •   Windchill URL  cannot be accessed via Internet Explorer on Windows 8 ( or 8.1 )  and Windchill DTI fails to work on Windows 8 ( or 8.1 )     


 
This is a printer-friendly version of Article 355705 and may be out of date. For the latest version click CS355705