Strengthening security for ECM Everywhere/Tomcat

Tyler Ford

When accessing the strength of security of ECM everywhere through https://www.ssllabs.com/ssltest/index.html it resulted in a low grade. Below is a link to follow to disable Weak Ciphers and SSL 2.0 in Tomcat server.xml file. When I follow the instructions, by changing the sslEnabledProtocols from TLS to TLSv1,TLSv1.1,TLSv1.2 and by adding the ciphers, this breaks the app and I can't log-in. It returns an error saying that the server did not respond. I wanted to know some security measures Opentext uses when using tomcat for their applications like ECM Everywhere.

https://www.sslshopper.com/article-how-to-disable-weak-ciphers-and-ssl-2-in-tomcat.html