Configure EMS Tomcat to only support TLS 1.2 or greater SSL sessions

Configure EMS Tomcat to only support TLS 1.2 or greater SSL sessions

To restrict tomcat to certain protocols you need to make changes to the tomcat connector configuration in server.xml file from C:\Program Files\Neverfail\tomcat\apache-tomcat\conf\: 

For example if you want to modify the protocols to TLSv1.2:

original:

<Connector port="${hbws.config.local_host_ssl_port}" protocol="HTTP/1.1" SSLEnabled="true"
               maxThreads="150" scheme="https" secure="true"
               clientAuth="false" sslProtocol="TLS" 
			   keystoreFile="../ssl/NFKeyStore.jks"
			   keystorePass="D32g9Z17aB"
			   keyAlias="nfhb_private_certificate"/>

new:

    <Connector port="${hbws.config.local_host_ssl_port}" protocol="HTTP/1.1" SSLEnabled="true"
               maxThreads="150" scheme="https" secure="true"
               clientAuth="false" sslProtocol="TLS" sslEnabledProtocols="TLSv1.2"
			   keystoreFile="../ssl/NFKeyStore.jks"
			   keystorePass="D32g9Z17aB"
			   keyAlias="nfhb_private_certificate"/>

Remember that if you change the server.xml you have to stop and start nfwebsvc service for the changes to take affect.