Appian Cloud allows customers to configure HTTPS access to sites via two different TLS policies - TLS 1.2 and TLS 1.2 with forward secrecy only.
The first policy, TLS 1.2, requires users to access the site using TLS 1.2. This TLS policy supports the use of forward-secrecy for clients that support it, but can fall-back to TLS 1.2 without forward-secrecy in order to support older HTTPS clients.
The second policy, TLS 1.2 with forward secrecy only, can be enabled upon customer request by creating an Appian Support case. This TLS policy requires users to access the site using TLS 1.2 and requires that HTTPS clients support forward-secrecy.
The recommended TLS policy for most sites is TLS 1.2, as it offers the security of TLS 1.2 with forward-secrecy, while maintaining compatibility with older systems that do not support forward-secrecy.
This article applies to all versions of Appian Cloud.
Last Reviewed: March 2020
© 2020 Appian. All rights reserved.