Authentication Manager uses TLS 1.2, but supports SSL 3.0, TLS 1.0, and TLS 1.1. Authentication Manager supports a strict TLS 1.2 mode that requires TLS 1.2.
The most recent Payment Card Information Data Security Standard (PCI DSS) recommends using the Transport Layer Security (TLS) 1.2 cryptographic protocol for secure network communications. By default, new RSA Authentication Manager 8.2 or later deployments use TLS 1.2, but TLS 1.0 and TLS 1.1 are supported. Authentication Manager supports a strict TLS mode that only uses TLS 1.2 for communication within your Authentication Manager deployment.
You can enable and disable the strict TLS 1.2 mode. To do so, perform the following procedure on the primary instance and each replica instance. Updating the primary instance automatically updates the web tier, but restarting the web tier is required for the changes to take effect.
Before you begin
Obtain the rsaadmin operating system password for the primary instance and each replica instance.