2.8.3 tomcat8.conf

JAVA_OPTS="${JAVA_OPTS} -Dsun.security.ssl.allowUnsafeRenegotiation=false"

JAVA_OPTS="${JAVA_OPTS} -Djdk.tls.rejectClientInitiatedRenegotiation=true"

JAVA_OPTS="${JAVA_OPTS} -Djdk.tls.ephemeralDHKeySize=2048"

You can modify this file using Advanced File Configurator. See Advanced File Configurator in the NetIQ Access Manager Appliance 5.0 Administration Guide.