4.3 TLS Version Configuration

The following table summarizes the default TLS version for each Tuxedo component and provides configuration options for changing it.

Table 4-2 TLS Version Configurations

TLS Client			TLS Server
Component	Default Version	Configurations Option	Component	Default Version	Configuration Option
Workstation client	TLSv1.3_1.2	Environment variable WSNADDR. For example: WSNADDR="//host1:8810;TLSv1.3"	Workstation Listener/Handler	TLSv1.3_1.2	Environment variable TM_TLS_FORCE_VER
JOLT client	TLSv1.3_1.2	Java property bea.jolt.tls.version. For example: System.setProperty("bea.jolt.tls.version" "TLSv1.3");	JOLT Listener/Handler	TLSv1.3_1.2	Environment variable TM_TLS_FORCE_VER
CORBA client	TLSv1.3_1.2	The Tobj_Bootstrap constructor naddress parameter or the environment variable TOBJADDR	CORBA Listener/Handler	TLSv1.3_1.2	Environment variable TM_TLS_FORCE_VER
BRIDGE	TLSv1.3_1.2	Not Supported	BRIDGE	TLSv1.3_1.2	Environment variable TM_TLS_FORCE_VER
tmboot/tmshutdown	TLSv1.3_1.2	Not Supported	tlisten	TLSv1.3_1.2	Environment variable TM_TLS_FORCE_VER
GWTDOMAIN	TLSv1.3_1.2	Configuration option DM_TDOMAIN/TLSversion in DMCONFIG file. For example:TLSversion=TLSv1.3	GWTDOMAIN	TLSv1.3_1.2	Environment variable TM_TLS_FORCE_VER
External Web service client	N/A	N/A	GWWS	TLSv1.3_1.2	Environment variable TM_TLS_FORCE_VER
GWWS	TLSv1.3_1.2	Attribute tlsversion in element Endpoint in SALTDEPLOY file. For example:<Endpoint address="..." tlsversion="TLSv1.3"/>	External Web service server	N/A	N/A
LMS	TLSv1.3_1.2	Not Supported	TSAM Plus Manager	See WebLogic Server document	See WebLogic Server document

Note:

Configuration options such as environment variable TM_TLS_FORCE_VER supports the following values. Any other values are ignored, and the default TLS version will be used.

• TLSv1.2
• TLSv1.3
• TLSv1.3_1.2