By default older TLS versions are disabled in a standard Admin UI installation. Additional ciphers and TLS protocol versions can be disabled if needed.
SiteMinder Admin UI 12.8 and later.
Follow these steps to disable any of the default ciphers used by the Admin UI:
<https-listener enable-http2="true" enabled-cipher-suites="SSL_RSA_WITH_RC4_128_MD5,SSL_RSA_WITH_RC4_128_SHA,TLS_RSA_WITH_AES_128_CBC_SHA,TLS_DHE_RSA_WITH_AES_128_CBC_SHA,TLS_DHE_DSS_WITH_AES_128_CBC_SHA,SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA,TLS_RSA_WITH_AES_256_CBC_SHA,TLS_DHE_RSA_WITH_AES_256_CBC_SHA" enabled-protocols="TLSv1.1,TLSv1.2" name="https" no-request-timeout="120000" security-realm="SSLRealm" socket-binding="https"/>
Likewise to disable specific TLS versions, follow these steps:
Rollback Steps:
Perform these steps if any issues are encountered after making the changes.