Enabling TLS 1.2 in IBM Java

By default, IBM Java has TLS 1.0 enabled. To enable TLS 1.2, change the value of the Dcom.ibm.jsse2.overrideDefaultTLS parameter to true in the jvm.options file.

Before you begin

9.2.13 Starting from application update 9.2.13, TLS 1.2 is enabled in IBM Java by default.


  1. Go to the computer where the BigFix Inventory server is installed.
  2. Go to one of the following directories and open the jvm.options file.
    • Windows icon C:\Program Files\ibm\BFI\wlp\usr\servers\server1\
    • Linux icon /opt/ibm/BFI/wlp/usr/servers/server1/
  3. Set the value of the -Dcom.ibm.jsse2.overrideDefaultTLS to true.
  4. Restart the BigFix Inventory server.
    1. Stop the server.
    2. Start the server.