How to configure SSL/TLS protocols allowed for HTTPS connections to the FMS (4288189)

This article describes how to change the TLS protocols allowed for HTTPS connections to the Foglight Management Server (FMS). 

How to disable SSL v3 and enforce TLS 1.2 for HTTPS connections to the Foglight Management Server?

How to enable TLS 1.3 for HTTPS connections to the Foglight Management Server?

The allowed SSL/TLS protocols for HTTPS connections are controlled by the sslEnabledProtocols attribute in [FMS_HOME]/server/tomcat/server.xml on the Foglight Management Server (FMS) host.

Update this attribute to restrict or enable specific protocol versions as needed.

Example:

Edit:

sslEnabledProtocols="TLSv1.2,TLSv1.1,TLSv1,SSLv2Hello"

To:

sslEnabledProtocols="TLSv1.3,+TLSv1.2"

Restart the Foglight Management Server for changes to take effect.

Note: In newer Foglight versions, secure TLS protocols may already be configured by default, and manual changes may not be necessary.