# How to configure a list of TLS Ciphers for Keycloak

**URL:** <https://forum.keycloak.org/t/how-to-configure-a-list-of-tls-ciphers-for-keycloak/18859>\
**Category:** Securing applications\
**Created:** [December 7, 2022, 5:03pm UTC](https://forum.keycloak.org/t/how-to-configure-a-list-of-tls-ciphers-for-keycloak/18859 "2022-12-07T17:03:50Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![sskwerski](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/sskwerski/32/7202_2.png) [@sskwerski](https://forum.keycloak.org/u/sskwerski)\
**Post date:** [December 7, 2022, 5:03pm UTC](https://forum.keycloak.org/t/how-to-configure-a-list-of-tls-ciphers-for-keycloak/18859/1 "2022-12-07T17:03:50Z")

</div>

I’ve been trying to find a way to limit the ciphers used by keycloak to pass a PCI scan.

If i alter the standalone.xml file with the line of code - the site does not load.

\<https-listener name=“https” socket-binding=“https” ssl-context=“applicationSSC” enable-http2=“true” enabled-protocols=“TLSv1.2” enabled-cipher-suites="TLS\_ECDHE\_ECDSA\_WITH\_AES\_256\_GCM\_SHA384, TLS\_ECDHE\_ECDSA\_WITH\_AES\_128\_GCM\_SHA256, TLS\_ECDHE\_RSA\_WITH\_AES\_256\_GCM\_SHA384, TLS\_ECDHE\_RSA\_WITH\_AES\_128\_GCM\_SHA256/\>

Any ideas or guidance?