How to disable tls 1.0 and enable/enforce tls 1.2 & 1.3 for jira

[Melvin Ranasinghe]

I have a Jira Server that is running on windows. I want to disable tls 1.0 and enable/enforce tls 1.2 & 1.3 for Jira due to security reasons. What are the best practices for performing this task?

[Nic Brough -Adaptavist-]

Welcome to the Atlassian Community!

Best thing to do is remove the TLS protocols from the list Tomcat supports.  Find the server.xml for the Tomcat Jira runs inside and edit it.  Find the "enabled protocols" line and remove TLS 1.0 and 1.1 from it, then restart the service.