title: Enable only TLS 1.3 on AIX 7.1 for IBM SDK 8 and Tomcat 7.0.108
body: <p>We would like to enable only TLSv1.3 for IBM SDK8 (service refresh 6, fix pack 25) and Tomcat 7.0.108 on AIX 7.1.</p>
  <p>I've set sslEnabledProtocols=&quot;TLSv1.3&quot; in server.xml of Tomcat and I get the below error:</p>
  <pre><code>SEVERE: javax.net.ssl.SSLHandshakeException: No appropriate protocol (protocol is disabled or cipher suites are inappropriate)
              at com.ibm.jsse2.Z.&lt;init&gt;(Z.java:287)
              at com.ibm.jsse2.ac.&lt;init&gt;(ac.java:9)
              at com.ibm.jsse2.ba.a(ba.java:52)
              at com.ibm.jsse2.bf.beginHandshake(bf.java:84)
              at org.apache.tomcat.util.net.SecureNioChannel.reset(SecureNioChannel.java:91)
              at org.apache.tomcat.util.net.SecureNioChannel.&lt;init&gt;(SecureNioChannel.java:73)
              at org.apache.tomcat.util.net.NioEndpoint.setSocketOptions(NioEndpoint.java:677)
              at org.apache.tomcat.util.net.NioEndpoint$Acceptor.run(NioEndpoint.java:844)
              at java.lang.Thread.run(Thread.java:822)
  </code></pre>
  <p>I've followed the instructions on this website and tried all the flags but the above error still remains:  <a href="https://www.ibm.com/support/knowledgecenter/SSYKE2_8.0.0/com.ibm.java.security.component.80.doc/security-component/jsse2Docs/enablingtls.html" rel="nofollow noreferrer">https://www.ibm.com/support/knowledgecenter/SSYKE2_8.0.0/com.ibm.java.security.component.80.doc/security-component/jsse2Docs/enablingtls.html</a></p>
  <p>If I set sslEnabledProtocols=&quot;TLSv1.2,TLSv1.3&quot; in server.xml of Tomcat, I do not see the error but the client browser (Chrome) connects on TLSv1.2 and not on TLSv1.3.</p>