How to disable TLS1.0 and TLS1.0 in Policy Manager Server on Windows?

Issue:

How to disable TLS1.0 and TLS1.0 in Policy Manager Server ?

Resolution:

The Java system properties for Policy Manager Server (PMS) can be specified via the Windows registry:

1. Run Regedit as administrator.
2. Create the following string registry

   key: HKEY_LOCAL_MACHINE\SOFTWARE(Wow6432Node)\Data Fellows\F-Secure\Management Server 5\additional_java_args

3. Specify the Java system properties in the following format:

   -DenableVistaInteroperability=false

4. Restart the Policy Manager Server service to make the new configuration take effect.

Reference: https://community.withsecure.com/en/kb/articles/5631-policy-manager-advanced-configuration-settings
 

If issue persists , can try add -DenableVistaInteroperability=false – -DenableWindowsServer2012Interoperability=false and restart service.

For v16.00 value should be set at HKLM\SOFTWARE\WithSecure\Policy Manager\Policy Manager Server\additional_java_args

Usually, no need to touch httpsCipherSuites values