Set-OVApplianceSecurityProtocol does not work

[christophvw]

OneView
Firmware 11.10.00-0516211

Import-Module HPEOneView.1000

Connect-OVMgmt -Hostname fqdn

Set-OVApplianceSecurityProtocol -EnableTlsVersion TLSv1.2
WARNING: Changing the appliance security protocol(s) will immediately reboot the appliance.

Confirm
Are you sure you want to perform this action?
Performing the operation "enable only 'TLSv1.2' security protocol(s)" on target
Set-OVApplianceSecurityProtocol: Insufficient input. Input must include all protocols TLSv1,TLSv1.1,TLSv1.2,TLSv1.3 with enable, disable values. Specify all protocols TLSv1,TLSv1.1,TLSv1.2,TLSv1.3 with enable, disable values.

[VincentBerger]

This is likely because OneView 11.x added support for TLSv1.3 which the current version of the library (tailored for OneView 10.0) doesn't know about. We'd have to wait for a new release of the library and I don't know when that could be.
In the meantime, the following snippet of code could work around the problem. Be careful, as mentioned in the warning displayed when you run the Set-OVApplianceSecurityProtocol cmdlet, sending this request will reboot OneView right away, no confirmation asked.

$body = @"
[
  {
    "protocolName": "TLSv1",
    "enabled": false
  },
  {
    "protocolName": "TLSv1.1",
    "enabled": false
  },
  {
    "protocolName": "TLSv1.2",
    "enabled": true
  },
  {
    "protocolName": "TLSv1.3",
    "enabled": true
  }
] 
"@

$resp = Send-OVRequest -method PUT -body $body -uri "/rest/security-standards/protocols"

[ChrisLynchHPE]

Yes, this is due to the 10.0 library not supporting TLS 1.3 protocol. That needs to be added here.