---
title: Security Protocol List
description: A space-separated list of security protocols preceded by a dash (-) that are not used when connecting to AM. The following protocols are supported:
component: web-agents
version: 2025.11
page_id: web-agents:properties-reference:org.forgerock.agents.config.tls
canonical_url: https://docs.pingidentity.com/web-agents/2025.11/properties-reference/org.forgerock.agents.config.tls.html
---

# Security Protocol List

A space-separated list of security protocols preceded by a dash (-) that are **not** used when connecting to AM. The following protocols are supported:

* `TLSv1`

* `TLSv1.1`

* `TLSv1.2` (Enabled)

* `TLSv1.3` (Enabled)

SSLv2 and SSLv3 are always disabled, regardless of the setting.

To change the default value, set an environment variable, `AM_SSL_OPTIONS`.

Default: `-TLSv1 -TLSv1.1`

|                    |                                                                 |
| ------------------ | --------------------------------------------------------------- |
| Property name      | `org.forgerock.agents.config.tls`   Introduced in Web Agent 4.x |
| Function           | Miscellaneous                                                   |
| Type               | String                                                          |
| Bootstrap property | Yes                                                             |
| Required property  | No                                                              |
| Restart required   | No                                                              |