# TLS and Cipher Suites

**URL:** <https://forum.keycloak.org/t/tls-and-cipher-suites/8088>\
**Category:** Configuring the server\
**Created:** [March 22, 2021, 11:25pm UTC](https://forum.keycloak.org/t/tls-and-cipher-suites/8088 "2021-03-22T23:25:08Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Skmishra](https://avatars.discourse-cdn.com/v4/letter/s/b9e5f3/32.png) [@Skmishra](https://forum.keycloak.org/u/Skmishra)\
**Post date:** [March 22, 2021, 11:25pm UTC](https://forum.keycloak.org/t/tls-and-cipher-suites/8088/1 "2021-03-22T23:25:08Z")

</div>

Dear All,  
Could you please suggest where to update TLS and Cipher Suites in standalone.xml file or somewhere for Keycloak.  
Objective is to use only TLS1.2 and disable weak Cipher Suites.

Please suggest.  
Thanks.

---

<div class="post-metadata">

**Author:** ![Taro](https://avatars.discourse-cdn.com/v4/letter/t/df705f/32.png) [@Taro](https://forum.keycloak.org/u/Taro)\
**Post date:** [March 28, 2021, 8:25pm UTC](https://forum.keycloak.org/t/tls-and-cipher-suites/8088/2 "2021-03-28T20:25:14Z")

</div>

Hi Skmishra,

Here is just one of suggestion in standalone.xml:

```auto
<https-listener name="https" socket-binding="https" security-realm="ApplicationRealm" enable-http2="true" enabled-protocols="TLSv1.2" enabled-cipher-suites="TLS_RSA_WITH_AES_128_GCM_SHA256"/>

```

Regards,