I have upgraded to Columbus 2.9.1 but now I am no longer able to access the Columbus webUI via IE with an error regarding TLS version. What does this mean?
When accessing the Columbus 2.9.1 web user interface via Internet Explorer 11 (IE) you might be faced with the following error:
When this error appears it is not possible to proceed to the requested website.
In Columbus 2.9.1 the Nginx framework has been upgraded, this includes support for the latest TLS versions. By default Columbus 2.9.1 uses TLSv1.3.
TLSv1.3 is not widely used at the moment and it appears as though IE 11 does not fully support it.
Initially you need to check and potentially edit the IE settings:
- Tools > Internet Options > Advanced
- scroll to the bottom and under the ''Security'' heading make sure the ''Use TLS 1.2'' and '' Use TLS 1.3 (experimental)'' options are checked
In the case of IE 11 and because TLSv1.3 is not yet fully supported it might be necessary to make a small configuration change on the Columbus side as well to allow it to use TLSv1.2.
Go to the following location:
Edit the ''nginx.tmpl'' to include the TLSv1.2 option. This can be found on ~ line 177.
Change it from:
ssl_protocols TLSv1.2 TLSv1.3;
Save the change and then restart the web component of Columbus:
$ sudo /etc/init.d/columbus restart web
Check the status to make sure it's back up:
$ sudo /etc/init.d/columbus status web
On occasion the startup script doesn't wait long enough for Nginx to be back online so it might be necessary to manually start the Columbus web service again ($ sudo /etc/init.d/columbus start web).
Now try connecting to the Columbus web UI via Internet Explorer 11 once more. The error regarding the TLS version should no longer appear.