Hi Peter,
This document here specifically addresses weak ciphers which is a component of TLS/SSL.
WCC 11.4 should already be configured to use TLS1.2 so nothing to update there.
Regarding keytool and certificates, if you are looking to upgrade to a SHA2 private certificate please review this document and / or the associated video.
If none of this helps and you still have questions please just let me know and I will be happy to assist in any way I can.
Regards,
Mark