How do I disable TLS 1.0 and TLS 1.1 protocols for EUM Server?

[Saradhi.Potharaju]

In the <EUM_HOME>/jre/lib/security/java.security file, add TLSv1 and TLSv1.1 to the existing value of the property jdk.tls.disabledAlgorithms. Then restart the EUM Server.

Example:

jdk.tls.disabledAlgorithms= SSLv2Hello, SSLv3, TLSv1, TLSv1.1

Note: There must be a space between the comma and next algorithm name.

Test the connectivity of the EUM Server using TLSv1 (tls1.0) with OpenSSL. The connectivity should fail with a "handshake failure" error.

Example:

openssl s_client -connect <eum_host>:<eum_port> -tls1