How to Remove Weak Ciphers Suites on Web Help Desk for Security Hardening

This article describes how you can disable or enable specific Cipher Suites. However, due to some internal security measure and avoiding vulnerability issues, you can control which Ciphers suites you want to allow within the application.

1.    Log in to the Web Help Desk server.
2.    Stop Web Help Desk.
3.    Navigate to:
C:\Program Files\WebHelpDesk\conf
4.    Create a backup copy of the tomcat_server_template.xml file and store the file in a separate location. If you encounter any issues, you can revert to the original settings.
5.    Open the tomcat_server_template.xml file in a text editor (such as Notepad).
6.    In the file, locate the WEBHELPDESK_SSL_Port settings.
7.    Locate ciphers in the file. There should be two occurrences.
For example:
ciphers="TLS_RSA_WITH_AES_128_CBC_SHA256,TLS_RSA_WITH_AES_256_CBC_SHA256,TLS_RSA_WITH_AES_256_CBC_SHA,TLS_RSA_WITH_AES_128_CBC_SHA,SSL_RSA_WITH_3DES_EDE_CBC_SHA,SSL_RSA_WITH_RC4_128_SHA1,SSL_RSA_WITH_RC4_128_MD5,TLS_EMPTY_RENEGOTIATION_INFO_SCSV"
8.    Disable the weak Ciphers by removing in the Cipher's List
9.    Repeat step 7 and step 8 for the remaining occurrence.
10.    Save and close the file. 
11.    Start Web Help Desk.