Enable TLS 1.2 for agents running in JVM inside HCL Domino

When you disable TLS 1.0 and TLS 1.1 because of security reasons, you can get into trouble when running Java agents inside HCL Domino when performing https requests. JVM runs default on TLS 1.0.

You have to tell HCL Domino JVM to use TLS 1.2. How?

1. create a textfile in ( Linux: /opt/HCL/jvmoptions.txt | Windows: C:\HCL\jvmoptions.txt) and put 1 line inside it:
   https.protocols=TLSv1.2
   
2. add 1 line inside notes.ini of the Domino server:
   Linux: JavaUserOptionsFile= /opt/HCL/jvmoptions.txt
   Windows: JavaUserOptionsFile= c:\HCL\jvmoptions.txt

Then the only thing left you have to do is to restart the Domino server.

Views: 3652