TLS Versions Supported

  • We are working with a customer who is looking at moving to TLS 1.2 as their primary protocol for their vCenter. Does Zerto support this at this time?

    Hello Parker,


    Mike from Zerto here. Support for TLS 1.2 was added in version 5.0. Unless you are looking to disable SSL and/or previous versions of TLS, you will not need to do anything extra to enable TLS 1.2 usage.


    What would be the procedure if the customer wanted to disable all old version of TLS (1.0 and 1.1) and utilize only 1.2?

    Hello Parker,

    We would request that you open a support case to obtain that procedure.

    i understand ZVM by default use 1.2 and tweek file can be created to not use 1.0 and 1.1 at all,  but is there a way to stop using 1.0 and 1.1 or a VRA agent?


    Hi Ajoy,

    Guy from Zerto here.

    Please open a support case for the respective procedure you are looking for.



    yes i opened a case and the response i got is TLS 1.0 /1.1 cannot be disabled on VRA. do you have any plan to disable these on future release?


    Please note, the procedure support can offer is meant for disabling TLS 1.0/1.1 for the ZVM service.

    For VRA service, there is no workaround to disable 1.0/1.1 prior 8.5 version. In the 8.5 version and above, the VRA enforces TLS 1.2 as the minimum protocol. When attempting to connect with a protocol lower than TLS 1.2, the 8.5 VRA will reject the connection.

The forum ‘Support Q & A’ is closed to new topics and replies.