I have a customer requirement of TLS 1.2 with min of AES 256 encryption,

my understanding is that TLS 1.2 supports BOTH AES 256 and AES 128?  (Not sure if AES128 is supported in tls 1.2, i see some conflicting info).  Is there a way to enforce the use of AES 256 in the powerserver api?

Is there a way to enforce the use in powerserver of tls 1.2 or greater, or is that only a function of the server (iis)?  Our current windows server version is 2016, so some of the configuration options as pointed out in the PS docs are not available.  

from the PS 2022R3 security whitepaper: 

"enable TLS 1.2/TLS 1.3 for the file transfer between the client and the web server, and also enable TLS 1.2/TLS 1.3 for the REST communications between the client and the .NET server."