-
Title
How to Configure Web Portal to Accept only TLS 1.2 Connections -
Description
How to Configure Web Portal to Accept only TLS 1.2 Connections -
Resolution
This article assumes that SSL has already been enabled in Web Portal. For more information on how to do this, please see: https://support.erwin.com/hc/en-us/articles/115000246828-How-to-enable-erwin-Web-Portal-SSL-support-
Steps:
1- Stop the Web Portal Service
2- Open<Web Portal Home>\tomcat\conf\server.xml
3- Update sslEnabledProtocols="TLSv1.2" . Here is an example....
<?xml version="1.0" encoding="UTF-8"?>
<Server port="${shutdown.port}" shutdown="SHUTDOWN">
<Service name="MetaIntegration">
<Connector SSLEnabled="true" clientAuth="false" keyAlias="tomcat-key" keyPass="" keystoreFile="conf/keystore" keystorePass="changeit" maxPostSize="-1" maxThreads="200" port="${connector.port}" scheme="https" secure="true" sslEnabledProtocols="TLSv1.2" sslProtocol="TLS"></Connector>
<Engine defaultHost="localhost" name="MetaIntegration">
<Host appBase="webapps" autoDeploy="false" name="localhost" unpackWARs="false" workDir="${catalina.data}/webapps">
<Alias>${server.fqdn}</Alias>
</Host>
</Engine>
</Service>
</Server>4- Restart the Web Portal Service