Configuring SSL handshakes to use TLS 1.2

The CAE Server and the CAE Agent perform the handshakes using the default SSL protocol, which can include SSL3.0, TLS1, TLS1.1, or TLS1.2.

To force the CAE Server to perform the handshakes using only TLS1.2 protocols, you can specify the following CAE Server parameters.

On Windows

Specify the following in cqm.server.properties of the CAE Server:

-Djdk.tls.client.protocols=TLSv1.2
-Dhttps.protocols=TLSv1.2
If a cqm.server.properties file does not exist, create one.
On USS

Specify the following in STDENV parameters of the CAE Server:

CQM_TLS_VERSION=TLSv1.2

For more information, see https://www.ibm.com/support/pages/node/687653