In order to further harden a Mobility Suite environment, TLS 1.0 and TLS 1.1 can be disabled leaving all SSL communication using only TLS 1.2 which is more secure. The steps to disabled TLS 1.0 and TLS 1.1 are as follows:
1. Navigate to '/usr/local/nukona/etc/nginx/conf.d/' using the Linux Terminal on the Mobility Suite Front End.
cd /usr/local/nukona/etc/nginx/conf.d/
2. Access the 'appstore_cu.conf' file for editing.
vi appstore_cu.conf
3. Navigate to the entry labeled 'ssl_protocols TLSv1 TLSv1.1 TLSv1.2;' and type 'i' to access removal of the TLSv1/TLSv2 entries.
i
4. Press the 'Escape' key and type ':wq' to save the edits to the file.
:wq
5. Restart the Mobility Suite's nginx service by typing in 'sudo service mm-nginx restart'.
sudo service mm-nginx restart
Once the service starts back up, the environment will no longer accept TLS 1.0 and TLS 1.1 connections.