Disabling TLS 1.0 and 1.1 in Java for Jamf Pro

Technical Articles

Solution
Application
Content Type: Technical Documentation
Utilities & Services
ft:locale: en-US

This method disables TLS 1.0 and 1.1 for Jamf Pro and leaves TLS 1.2 as the only version enabled.

Stop Tomcat.
For Linux, do the following:
1. Navigate to the tomcat/bin/setenv.sh file.
2. Edit the file and paste the following property into the JAVA_OPTS line:
```
-Djdk.tls.client.protocols=TLSv1.2
```
  For example, the JAVA_OPTS line should now look like the following:
```
JAVA_OPTS="$JAVA_OPTS -Xmx1024M -Djdk.tls.client.protocols=TLSv1.2"
```
3. Save the file.
4. Start Tomcat.
For Windows, do the following:
1. Open the tomcat10w.exe GUI utility.
  It's path is C:\Program Files\JSS\Tomcat\bin\tomcat10w.exe.
2. In the Apache Tomcat Properties window, click the Java tab.
3. Add the -Djdk.tls.client.protocols=TLSv1.2 flag to the Java Options field.
4. Click Apply.
5. Click OK.
Start Tomcat.
TLS 1.2 will now be the only TLS version enabled for Jamf Pro.

Note:

If you also need TLS 1.3, you can append the following property to the JAVA_OPTS line:

-Djdk.tls.client.protocols=TLSv1.2,TLSv1.3