Article - CS304124

Configuring Apache Tomcat to use specific versions of TLS for ThingWorx Platform

Modified: 15-Sep-2025   


Applies To

  • ThingWorx Platform 8.0 to 10.0

Description

  • How to configure ThingWorx to only use TLS 1.2
  • How to restrict TLS version to TLS 1.2 on Apache Tomcat
  • How to disable ciphers for TLS 1.1 and TLS 1.0 in ThingWorx Platform
  • Security scan on servers which checks for any vulnerabilities, reports that TLSv1.0 is enabled
  • Leaving TLS 1.0 and/or TLS 1.1 enabled is considered a security vulnerability and needs to be mitigated
  • Disabling TLS 1.0 and 1.1 is not working as expected
    • Can still form connections with these protocol versions
  • What is the recommended TLS version for ThingWorx?
This is a printer-friendly version of Article 304124 and may be out of date. For the latest version click CS304124