How to configure OCR for TLS 1.2
OCR should not allow TLS 1.0 or TLS 1.1 by default. This can be accomplished by changing the OCR.properties file to include by default the following line:
server.ssl.enabled-protocols=TLSv1.2
See also: Disable SSL v3, TLS 1.0, and TLS 1.1 on Data Loss Prevention components (broadcom.com)