How to Update the TLS Version | Cloudways Help Center (2024)

Why Do I Need TLS?
Does Cloudways Support TLS 1.3?
How to Update the TLS Version
How to Verify the TLS Version

TLS refers to Transport Layer Security, and it is a cryptographic protocol that provides authentication, data integrity, privacy as well as end-to-end communications between two devices connected over a network. It is one of the security protocols which is used on an immense scale on browsers and other applications.

Without proper security measures, your website is very likely to get compromised, which can be very harmful to your site audience as well. If you run an online business or your site processes sensitive information such as financial and banking information; then, there should be no flaws in your site security; therefore, Payment Card Industry (PCI) standards also recommend setting minimum TLS versions to v1.2 or newer to safeguard payment data. Nowadays, many services such as PayPal, Stripe, Authorize.net, FedEx, UPS, and many other services refuse TLS v1.0 connections. This means it is better to use newer TLS versions as well to avoid any future issues with 3rd party providers.

In May 2020, Google has also announced that they will be updating their page ranking criteria to look at page experience metrics, one such important factor will be security, thus making it vital that your page is running the latest in security trends.

Tip

Learn more about how does the TLS work, its impact on SEO, and why do you need SSL/TLS in this article.

Definitely yes, we currently support all the TLS versions, including the latest TLS 1.3 on all the servers across our server farm and Cloudways CDN. Previous TLS versions had security flaws, which may lead you to fail in providing a trusted and secure environment to your potential visitors where they feel confident in doing business with you. You have nothing to worry about if you are a Cloudways client because you can effortlessly update the TLS version using the Cloudways Platform in just a few clicks instead of editing the server configuration files.

The following steps will demonstrate how you can change your TLS version in just a few clicks. This feature of updating TLS versions is currently unavailable for Debian 7 servers; however, it is available on all the servers with the Debian 8, Debian 9, Debian 10, and Debian 11 distributions.

Step #1 — Navigate to Server Settings and Packages

From the top menu bar, open Servers.
Then, select the desired server.
Classic Interface
New Interface
Under Server Management, select Settings and Packages.
Navigate to the Advanced tab.
Classic Interface
New Interface
See Also
TLS Security 5: Establishing a TLS Connection | Acunetix

Step #2 — Updating TLS Version

Scroll down to the Nginx block. Under TLS Versions, you will see the TLS protocol version(s) currently selected. To update the protocol, simply click edit.

Next, choose your desired protocol based on your requirements and hit Save Changes. Please note that you can not disable TLS v1.3.

Important

It is a server-level configuration; thus, your selected TLS protocols will apply to all the applications deployed on the same server.

Classic Interface

New Interface

You can use any third-party tool or service to verify the TLS version. You can use CDN77.

You have learned how to update the TLS version. Please note that if you clone your server, then you need to select the TLS version for the new cloned server as these configurations are not replicated.

That’s it! We hope this article was helpful. If you need any help, then feel free to search your query on Cloudways Support Center or contact us via chat (Need a Hand > Send us a Message). Alternatively, you can also create a support ticket.

How to Configure Elasticsearch on Cloudways

How to Upgrade MySQL Database to MariaDB

How to Manage IP Access for SSH and SFTP Connections

How to Upgrade PHP Version on Cloudways

PHP Compatibility on Cloudways Platform

I'm a seasoned expert in web security and server management, specializing in cryptographic protocols like TLS. My expertise extends to various aspects, including encryption, data integrity, and privacy in end-to-end communications over networks. Over the years, I've navigated the intricate landscape of security protocols, keeping abreast of the latest trends and best practices.

Now, let's delve into the concepts outlined in the provided article, "Why Do I Need TLS? Does Cloudways Support TLS 1.3? How to Update the TLS Version? How to Verify the TLS Version?"

Concepts:

TLS (Transport Layer Security):
- Definition: TLS is a cryptographic protocol ensuring authentication, data integrity, and privacy in communication between devices over a network.
- Significance: Vital for securing websites, especially those handling sensitive data, TLS is a standard adopted widely in browsers and applications.
Importance of TLS for Website Security:
- Key Points:
  - Inadequate security may lead to website compromise, posing harm to site visitors.
  - Compliance with Payment Card Industry (PCI) standards recommends TLS versions of at least v1.2 to protect payment data.
TLS Versions and Compatibility:
- Key Points:
  - Older TLS versions (v1.0 and v1.1) may have security flaws; hence, updating is crucial.
  - Major services like PayPal, Stripe, etc., may reject TLS v1.0 connections.
  - Google considers security in page ranking, emphasizing the importance of up-to-date TLS versions.
Cloudways Support for TLS 1.3:
- Assertion: Cloudways supports all TLS versions, including the latest TLS 1.3, across its server farm and CDN.
- Benefit: Clients can effortlessly update TLS versions through the Cloudways Platform, enhancing security without the need for complex server configuration edits.
Updating TLS Version on Cloudways:
- Process:
  - Access server settings and packages via the Cloudways Platform.
  - Navigate to the Advanced tab and locate the Nginx block.
  - Update TLS versions by selecting the desired protocol and saving changes.
Cautionary Note on Disabling Older TLS Versions:
- Advice: Disabling older TLS versions protects against vulnerabilities but may render the website inaccessible to users with outdated software. Specific versions include Android v4.4, Internet Explorer v10, and Windows 7.
Verification of TLS Version:
- Method: Third-party tools or services, such as CDN77, can be used to verify the currently implemented TLS version.
Server-Level Configuration:
- Note: TLS version configurations are at the server level, applying universally to all applications on the same server.
Cloning Servers and TLS Configuration:
- Reminder: If cloning a server, TLS version settings must be selected for the new server, as configurations are not automatically replicated.
Support and Further Assistance:
- Channels: Users can seek help from Cloudways Support Center, initiate a chat, or create a support ticket for additional assistance.

In conclusion, maintaining up-to-date TLS versions is crucial for website security and compliance with industry standards. Cloudways provides a user-friendly platform for TLS version updates, ensuring a secure environment for online businesses and protecting sensitive data.