Security Features Guide > TDV Security Features by Component > Java Supported Cipher Suites > How To Disable Specific Ciphers
 
How To Disable Specific Ciphers
If you want to disable specific ciphers you can modify the JDK as follows:
Edit <INSTALL_DIR>/jdk/conf/security/java.security
jdk.tls.disabledAlgorithms=<ALGORITHMS>
JVM-wide algorithm restrictions for SSL/TLS processing. It is possible to disallow certain algorithms or limit key sizes.
These settings are available since Java 1.7. For more information on algorithms and usage, see this link:
https://www.java.com/en/configure_crypto.html.
Note: In certain cases, you may want to enable an older version of TLS to allow data source connections to work as expected. In such cases, review the list of disabled ciphers and edit the list as needed. For example Java 11 has older TLS versions (TLS v1 and v1.1) disabled. However, for certain older versions of data sources to connect successfully, you will need to enable these versions and therefore remove these from the disabled list in the java.security settings file.