How to disable SSL 2.0 and 3.0 and use TLS 1.1 or higher instead in Service Desk Manager 17.x

Products

• CA Service Management - Service Desk Manager
• ServiceDesk

Issue/Introduction

How to disable SSL 2.0 and 3.0 and Use TLS 1.1 (with approved cipher suites) or higher instead.

 

 

Environment

Release : 17.1 and higher

Component : SERVICE DESK MANAGER

Resolution

1. Locate server.xml in Tomcat being used by SDM and take a backup of the file. The path should be similar to C:\Program Files (x86)\CA\Service Desk Manager\bopcfg\www\CATALINA_BASE\conf\server.xml

2. Locate the section to configure SSL searching for <Connector port="8443" protocol="HTTP/1.1" 

3.  Set the following in the connector:

sslProtocols="TLS" SSLEnabled="true" sslEnabledProtocols="TLSv1.1, TLSv1.2"

Example:




4. Save Changes

5. Restart Services.