# HiveMQ Cloud: cipher suite is not supported by client device

**URL:** <https://community.hivemq.com/t/hivemq-cloud-cipher-suite-is-not-supported-by-client-device/719>\
**Category:** HiveMQ Cloud\
**Created:** [September 15, 2021, 7:13am UTC](https://community.hivemq.com/t/hivemq-cloud-cipher-suite-is-not-supported-by-client-device/719 "2021-09-15T07:13:41Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![maiorfi](https://avatars.discourse-cdn.com/v4/letter/m/9d8465/32.png) [@maiorfi](https://community.hivemq.com/u/maiorfi)\
**Post date:** [September 15, 2021, 7:13am UTC](https://community.hivemq.com/t/hivemq-cloud-cipher-suite-is-not-supported-by-client-device/719/1 "2021-09-15T07:13:41Z")

</div>

We have activated a cloud broker whose configuration needs to be changed in order to meet cipher suites available on a commercial client device whose firmware is not under our control.

More in details, client device supports below cipher suites:

TLS\_DHE\_RSA\_WITH\_AES\_256\_CBC\_SHA256  
TLS\_DHE\_RSA\_WITH\_AES\_256\_CBC\_SHA  
TLS\_DHE\_RSA\_WITH\_AES\_128\_CBC\_SHA256  
TLS\_DHE\_RSA\_WITH\_AES\_128\_CBC\_SHA  
TLS\_RSA\_WITH\_AES\_256\_CBC\_SHA256  
TLS\_RSA\_WITH\_AES\_256\_CBC\_SHA  
TLS\_RSA\_WITH\_AES\_128\_CBC\_SHA256  
TLS\_RSA\_WITH\_AES\_128\_CBC\_SHA  
TLS\_ECDHE\_ECDSA\_WITH\_AES\_128\_CBC\_SHA  
TLS\_ECDHE\_ECDSA\_WITH\_AES\_256\_CBC\_SHA  
TLS\_ECDHE\_ECDSA\_WITH\_AES\_128\_CBC\_SHA256  
TLS\_ECDH\_ECDSA\_WITH\_AES\_128\_CBC\_SHA

Potentially, HiveMQ could be configured to meet these requirements, as stated here: [Security :: HiveMQ Documentation](https://www.hivemq.com/docs/hivemq/4.6/user-guide/security.html#cipher-suites)

How could we configure our cloud/managed instance (33d63ba0e1df4667a80bd92c190a51e4.s2.eu.hivemq.cloud)?

Thanks!

---

<div class="post-metadata">

**Author:** ![zingiber](https://avatars.discourse-cdn.com/v4/letter/z/ce73a5/32.png) [@zingiber](https://community.hivemq.com/u/zingiber)\
**Post date:** [September 15, 2021, 3:22pm UTC](https://community.hivemq.com/t/hivemq-cloud-cipher-suite-is-not-supported-by-client-device/719/2 "2021-09-15T15:22:02Z")

</div>

Hello and welcome to the community forums maiorfi,

Currently it is not possible to configure these suites in the cloud product. HiveMQ Cloud only offers a standard set of cipher suits.  
`TLS_RSA_WITH_AES_256_CBC_SHA` is a cipher suit supported both by HiveMQ Cloud as well as your device. Do you know if your device supports TLS 1.2?  
Is it possible for you to provide a debug SSL log from one such device so we can get a better understanding of why it is failing?

~ zingiber

---

<div class="post-metadata">

**Author:** ![maiorfi](https://avatars.discourse-cdn.com/v4/letter/m/9d8465/32.png) [@maiorfi](https://community.hivemq.com/u/maiorfi)\
**Post date:** [September 16, 2021, 7:56am UTC](https://community.hivemq.com/t/hivemq-cloud-cipher-suite-is-not-supported-by-client-device/719/3 "2021-09-16T07:56:30Z")

</div>

It’s really weird, but it seems that now our client devices succeeds in connecting to our managed broker instance…did you change anything on configuration?

Is there any other reason that could explain what is happening (devices firmware wasn’t updated and configuration wasn’t edited)?

---

<div class="post-metadata">

**Author:** ![zingiber](https://avatars.discourse-cdn.com/v4/letter/z/ce73a5/32.png) [@zingiber](https://community.hivemq.com/u/zingiber)\
**Post date:** [September 16, 2021, 12:01pm UTC](https://community.hivemq.com/t/hivemq-cloud-cipher-suite-is-not-supported-by-client-device/719/4 "2021-09-16T12:01:13Z")

</div>

I’m happy to hear you can now connect. My colleagues from the HiveMQ Cloud team just confirmed that no configuration was changed.

Enjoy your broker!