Installed this as a demo less then a month ago, Our security vendor scanned this server and found that TLS 1.0 and 1.1 was enabled, Looked at server.xml and saw the following line......

                 sslEnabledProtocols="TLSv1,TLSv1.1,TLSv1.2"

Should review your distribution and updates and ensure only TLS 1.2 is enabled.....