Rule version WBSP-AS-000160 · STIG v2 · 2026-08-27
Quality of Protection specifies the security level, ciphers, and mutual authentication settings for the Secure Socket Layer (SSL/TLS) configuration.
From the administrative console, navigate to Security >> SSL certificate and key management.
Click "SSL configurations".
Click on each SSL configuration to review.
Under "Additional Properties", click "Quality of protection (QoP)" settings.
If the "Protocol" field does not show "TLSv1.2 or greater", this is a finding.
From the administrative console, navigate to Security >> SSL certificate and key management.
Click "SSL configurations".
Click on each SSL configuration.
Under "Additional Properties", click "Quality of protection (QoP)" settings.
At the "Protocol" pull-down menu, select "TLSv1.2 or greater".
Click "OK".
Click "Save".
Restart the DMGR and all the JVMs.