PCI Compliance

To satisfy PCI compliance requirements with IBM HTTP Server 6.1 / Apache 2.0.47,  you will have to update httpd.conf with the following information.

TraceEnable off

FileETag MTime Size

UserDir disabled

Disable Mod status. Comment or remove the following line

-----------------------------------------------------------

#LoadModule status_module modules/mod_status.so

Disable SSLV2

---------------

SSLProtocolDisable SSLv2

Include the above line inside virtual host 443 section of each domain.

If you are hosting SSL in F5 BigIP LTM, in the corresponding clientssl profile, add the following in CIPHER textbox which has the value DEFAULT.
ALL:!ADH:!LOW:!EXP:!SSLv2:!NULL:HIGH:MEDIUM:RSA:RC4: