How to run jira server only in Tls 1.2

[pavan kumar]

How to run server in only tls1.2

[Nic Brough -Adaptavist-]

This depends on what layer is doing the SSL.

If you're doing it with Tomcat, go to <jira install>/conf and edit the server.xml for the sslProtocol line, removing the ones you don't want.

If you're doing it with a proxy, modify the proxy server settings to disable protocols you don't want. 

[JiraYo]

How specifically does one change this? i am trying to deactivate tls 1.0 and 1.1 which jira was found to be running by security audit. i attempted to change the server.xml file located at

c:\Program Files\Atlassian\JIRA\conf\server.xml

to

sslProtocol="TLSv1.2+TLSv1.3" (was previously just the string TLS)

but this does not work after restarting the service. TLS 1.0 and 1.1 are still advertised. Please advise if you know a way to change this. thanks