Enables TLS optimization for SSL simplification. SSL simplification is a method of TLS optimization using an SSL agent. SSL simplification provides zero-touch certificate management for clients that have a SteelHead Mobile installed. This feature requires RiOS 9.12 or later on the client-side and server-side SteelHeads and SteelHead Mobile 6.2.2 or later on each client endpoint. For details on configuring SSL simplification and TLS optimization, see the SteelHead User Guide and the SteelHead Mobile User Guide.

When you enable TLS optimization, the old SSL blade and the new TLS blade are active in the SteelHead and SteelHead Mobile. TLS optimization is activated only when it is enabled on both SteelHead peers and the SteelHead Mobile (or the SteelHead Mobile and the SteelHead). Otherwise, the old SSL blade will continue to be used.

The TLS blade expands Riverbed’s existing SSL and TLS optimization features by allowing you to optimize TLS 1.2 connections without manually installing or creating signed proxy certificates. While this capability exists in earlier versions of the SteelHead Mobile, the new TLS blade simplifies configuration and extends capabilities to branch mode. SteelHead Mobile 6.2.2 and later supports client authentication using modern Elliptical Curve Diffe-Hellman Ephemeral (ECDHE) cipher suites. Control over TLS connections use a web proxy model, while key access uses the same paradigm as hardware security module (HSM) deployments. For details on SSL simplification and SSL simplification and TLS optimization, see the SteelHead Mobile User Guide and the SteelHead User Guide.

The no command option disables the TLS optimization.

SteelHead Mobile