Security
      Back to home
      1. Knowledge Base
      2. EOP MobilePrint (Legacy)
      3. Security

      Config: Disable TLS 1.0 / 1.1

      How to run the EveryonePrint MobilePrint server software in a secure environment where older protocols are limited or prohibited.

      Issue:

      Y Soft customers want the freedom to completely disable TLS 1.0 / 1.1 protocols in the EveryonePrint MobilePrint server.

      Resolution:

      To effectively disable these protocols, please take the following steps: 

      • Stop running the EveryonePrint MobilePrint Web service
      • Edit <eop-dir>\jre\lib\security\java.security
      • Add this line at the end of the file: jdk.tls.disabledAlgorithms=TLSv1, TLSv1.1
      • Save the file with the changes and restart the Web service

      mceclip0-1

      You can easily verify that TLS 1.0 and 1.1 are properly disabled by using the "sslscan" utility from SourceForge: SourceForge - SSLScan - Fast SSL Scanner

      mceclip1