ABS supports only TLS 1.1 and TLS 1.2 and requires Open JDK 11.0.2. ABS ships with a default self-signed certificate with Java Keystore at abs/config/ssl/abs.jks and the default password set to abs123 in the abs.properties file. The default password is obfuscated in the abs.properties file. It is recommended to change the default passwords and obfuscate the new passwords. For more information, see Obfuscate passwords.

If you want to use your own CA-signed certificates, you can import them in ABS.
Note: The SSL communication between ASE and ABS is by default enabled. If you need to disable it, contact Ping Idendity support team.