This read-create object sets the minimum TLS protocol version — TLS 1.0, 1.1, or 1.2 — that will be enforced for the application identified by hpicfTlsMinApp in the same table row, defaulting to TLS 1.1. Admins raise this setting to harden a specific management application (such as Web SSL, OpenFlow, syslog, TR-69, or cloud connectivity) against weak, outdated TLS negotiation. For example, setting this to tls1dot2(3) for the webSsl application forces the switch's HTTPS management interface to reject any client that cannot negotiate at least TLS 1.2.