Adjust Security Protocols

R2026b

The default security settings for MATLAB^® Production Server™ enable all security protocols and cipher suites, except for the eNULL cipher suite. Use the ssl-protocols and ssl-ciphers properties to adjust the level of security.

By default, MATLAB Production Server instances try to use TLSv1.2 to secure connections between client and server. The server supports connections using TLSv1.2 and TLSv1.3. Use the ssl-protocols property to specify a list of allowed SSL protocols.

For example, to disable the TLSv1.3 protocol, add this configuration excerpt:

--ssl-protocols TLSv1.2

Because TLSv1.3 is not included in the list, the server instance does not enable the protocol.

Set the ssl-ciphers property in the server instance configuration to restrict the cipher suites used by the server instance.

For example, to enable only high-strength cipher suites, add this configuration excerpt:

--ssl-ciphers HIGH