/mcpNote You can't edit Cipher Expansion String and Algorithm Expansion String fields. The system validates the ciphers in the All TLS, SIP TLS, HTTPS TLS , and SSH Ciphers fields and auto populates ciphers in the Cipher Expansion String field. If you enter invalid ciphers in the Cipher String field, the Cipher Expansion String field doesn't auto populate and the following error message appears: You have entered an invalid Cipher String. The system validates the algorithms in the SSH Key Exchange and SSH MAC fields, and auto populates the algorithms in the Algorithm Expansion String field. If you enter invalid algorithms in the Algorithm String field, the Algorithm Expansion String field doesn't auto populate and the following error messge appears: You have entered an invalid Algorithm String. Note The ciphers or algorithms auto populated in Cipher Expansion String and Algorithm Expansion String fields are not the effective ciphers or algorithms. The system chooses the ciphers or algorithms from the Cipher Expansion String or Algorithm Expansion String field. If you have configured ciphers in the corresponding fields, you have to either reboot or restart the respective services. Table 19: Configured Ciphers and their corresponding Actions Action Configured Cipher Fields Reboot all nodes in the cluster for the cipher string to take effect. All TLS Restart the Cisco Tomcat service on all nodes for the cipher string to take effect. HTTPS TLS Restart Unified Communications Manager on all nodes for the cipher string to take effect. SIP TLS Reboot all nodes in the cluster for the cipher string to take effect. SSH Ciphers Reboot all nodes in the cluster for the algorithm string to take effect. SSH Key Exchange or SSH MAC You can enable ciphers by entering them in the Cipher String fields of the Cipher Management page. If you don’t enter them, all default ciphers supported by the application are enabled. However, you can also disable certain weak ciphers by not entering them in the Cipher String fields of the Cipher Management page. Note Security Guide for Cisco Unified Communications Manager, Release 15 and SUs 118 Basic System Security Configure Cipher String