---
title: "vms set_ssl_ciphers"
slug: "vms-set-ssl-ciphers"
tags: ["5.4"]
updated: 2026-10-28T01:53:11Z
published: 2026-10-28T01:53:11Z
canonical: "docs.vastdata.com/vms-set-ssl-ciphers"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.vastdata.com/llms.txt
> Use this file to discover all available pages before exploring further.

# vms set_ssl_ciphers

This command restricts the TLS cipher support on HTTPS connections to the VAST Web UI to a more restricted set of ciphers than the full set enabled with the minimum TLS version.

## Usage

```plaintext
vms set_ssl_ciphers --ssl-ciphers SSL_CIPHERS
                   [--id ID]
```

## Required Parameters

| `--ssl-ciphers SSL_CIPHERS` | Specifies the more restricted TLS cipher set. Specify `SSL_CIPHERS` as a string value. If minimum TLS version is set to v1.3, you can specify `AES256` to enable only the TLS_AES_256_GCM_SHA384 cipher on HTTPS connections to the VAST Web UI. The following ciphers, otherwise supported with minimum TLS version 1.3, are disabled with this option: - TLS_AES_128_GCM_SHA256 - TLS_AES_128_CCM_SHA256 |
| --- | --- |

## Options

| `--id ID` | ID of the VMS object |
| --- | --- |

## Example

The following example enables only the TLS_AES_256_GCM_SHA384 cipher when the minimum TLS version is 1.3:

```plaintext
vcli: admin> vms set_ssl_ciphers --id 1 --ssl-ciphers AES256
This action will impact your system.
Are you sure you want to change the ssl ciphers? [y/N] y
vcli: admin>
```