3.8 Disabling Weak Protocols

  1. Change to the Tomcat configuration directory:

    Linux: /opt/novell/nam/idp/conf

    Windows Server 2008: \Program Files (x86)\Novell\Tomcat\conf

  2. Open the server.xml file.

    Search for the sslProtocol attribute and make the following change to disable SSLv2, SSLv3, and TLS1.0:

    sslProtocol="TLSv1.2" sslEnabledProtocols="SSLv2Hello,TLSv1.1,TLSv1.2" 
  3. Restart Tomcat.

For more information, see the overview of Strengthening TLS/SSL Settings.