8/12/2019 8:51 PM

6/29/2020 4:03 PM

This article describes how to disable or enable specific TLS protocols in Web Help Desk.

By default, Web Help Desk enables all Apache Tomcat web protocols. However, due to some internal internal security measures and to avoid vulnerability issues, you can control which TLS protocol you want to enable within the application. 
 

Web Help Desk

1. Log in to the Web Help Desk server.
2. Stop Web Help Desk.

3. Navigate to:
   C:\Program Files\WebHelpDesk\conf

4. Create a backup copy of the tomcat_server_template.xml file and store the file in a separate location. If you encounter any issues, you can revert to the original settings.
5. Open the tomcat_server_template.xml file in a text editor (such as Notepad).
6. In the file, locate the WEBHELPDESK_SSL_Port settings.

7. Locate sslEnabledProtocols in the file. There should be two occurrences.
   For example:

   clientAuth="false" sslProtocol="TLS" sslEnabledProtocols="TLSv1.1, TLSv1.2"

8. Disable the targeted protocol by removing TLSv1, TLSv1.1, or TLSv1.2.
9. Repeat step 7 and step 8 for the remaining occurrence.
10. Save and close the file. 
11. Start Web Help Desk. 

Verify the TLS version in a web browser

You can verify the current TLS version using a Google Chrome or Mozilla Firefox web browser.

Verify the TLS version using Chrome

1. Open a Chrome web browser.
2. Log in to Web Help Desk.
3. Right-click the Web Help Desk interface and select Inspect.
4. In the toolbar, click Security.

5. Under Security Overview, scroll down and review the Connection details, as shown below.
   

Verify the TLS version using Firefox

1. Open a Firefox web browser.
2. Log in to Web Help Desk.
3. In the top menu, click Tools > Page Info.

4. Click the Security icon.
   The Technical Details section displays the current TLS version and SSL details, as shown below.