For security reasons, it is strongly recommended to allow HTTP communication solely over TLS 1.2 (Transport Layer Security).

To enable TLS 1.2 only, proceed as follows:

  1. Log in to the ICG machine and become root (or use sudo for the following commands).
  2. Open the configuration file opt/IGEL/icg/usg/conf/ with your editor of choice.
  3. Go to the section #tomcat and ssl configs

  4. Add the line server.ssl.enabled-protocols=TLSv1.2
  5. Save the changes.
  6. Restart the ICG with systemctl restart icg-server.service