SSLTLS12

The SSLTLS12 option specifies whether to use the Transport Layer Security (TLS) 1.2 or later protocol for Secure Sockets Layer (SSL) sessions.

Syntax


>>-SSLTLS12--+-No--+-------------------------------------------><
             '-Yes-'

Yes: Specifies that the server might use the TLS 1.2 or later protocol for SSL sessions. If you specify the SSLTLS12=YES option and do not specify the SSLDISABLELEGACYTLS option, TLS 1.2 might be used.
No: Specifies that the server uses TLS 1.1 or earlier protocol for SSL sessions.; The SSLDISABLELEGACYTLS option overrides the SSLTLS12=NO option and enforces the rejection of SSL connection attempts that use levels earlier than TLS 1.2.

Table 1. TLS versions used by the server for the SSLTLS12 and SSLDISABLELEGACYTLS options
SSLTLS12	SSLDISABLELEGACYTLS	TLS version that is used by the server
No*	No*	≤ TLS 1.1
No*	Yes	≥ TLS 1.2
Yes	No*	≤ TLS 1.2
Yes	Yes	≥ TLS 1.2
Notes: An asterisk (*) indicates the default for an option. ≤ A less than or equal symbol indicates the highest TLS version that is used by the server. ≥ A greater than or equal symbol indicates the lowest TLS version that is used by the server.

Set TLS 1.2 as the protocol for SSL sessions:

SSLTLS12 yes