11.1 On Primary Servers:

  1. Backup the server.xml in the following location:

    • On Windows:

    • On Linux:

  2. In the server.xml file, remove the following ciphers attribute in the Connector element:

    • SSL_RSA_WITH_3DES_EDE_CBC_SHA

    • TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA

    • TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA

    • TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA

    • TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA

  3. Restart the services by running the command.

    NOTE:If the zone is upgraded to 2017 Update 1 or later versions, then these steps are not required.