How to Configure Apache Tomcat for TLS 1.2 Only

For security reasons, it is strongly recommended to allow HTTP communication solely over TLS 1.2 (Transport Layer Security).

To enable TLS 1.2 only, proceed as follows:

1. Log in to the ICG machine and become root (or use sudo for the following commands).
2. Open the configuration file opt/IGEL/icg/usg/conf/application.properties with your editor of choice.
3. Go to the section #tomcat and ssl configs


4. Add the line server.ssl.enabled-protocols=TLSv1.2
   
5. Save the changes.
6. Restart the ICG with systemctl restart icg-server.service