3.17.3 tomcat.conf

JAVA_OPTS="${JAVA_OPTS} -Dsun.security.ssl.allowUnsafeRenegotiation=false"
JAVA_OPTS="${JAVA_OPTS} -Djdk.tls.rejectClientInitiatedRenegotiation=true"
JAVA_OPTS="${JAVA_OPTS} -Djdk.tls.ephemeralDHKeySize=2048"

You can modify this file using Advanced File Configurator. See Advanced File Configurator in the NetIQ Access Manager CE 24.2 (v5.1) Administration Guide.