diff --git a/deployment/environments/group_vars/all/infra.yml b/deployment/environments/group_vars/all/infra.yml
index 8d369f84132e3324c89bc0ca21747f085665f7a1..01b1ff32fe2ee4126b54395175f1d15693531255 100755
--- a/deployment/environments/group_vars/all/infra.yml
+++ b/deployment/environments/group_vars/all/infra.yml
@@ -1,4 +1,3 @@
-
 smtp:
   host: host
   port: 389
@@ -12,6 +11,7 @@ smtp:
     checkserveridentity: false
     trust: "*"
     timeout: 8000
+    protocols: "TLSv1.2 TLSv1.3"
   cas:
     sender: "serveur-cas@noreply.com"
     expiration: 1440 # 1 Day : 24 * 60 Minutes to reset password
diff --git a/deployment/roles/vitamui/templates/cas-server/application.yml.j2 b/deployment/roles/vitamui/templates/cas-server/application.yml.j2
index 0da7c75ccd600e915c8ab1e947b9a13f892cc109..9b800238fbaac1eb7523a4b0790afe5e4856526f 100644
--- a/deployment/roles/vitamui/templates/cas-server/application.yml.j2
+++ b/deployment/roles/vitamui/templates/cas-server/application.yml.j2
@@ -130,6 +130,7 @@ spring.mail.properties.mail.transport.protocol: {{ smtp.protocol|lower }}
 spring.mail.properties.mail.smtps.ssl.checkserveridentity: {{ smtp.smtps.checkserveridentity|lower }}
 spring.mail.properties.mail.smtps.ssl.trust: "{{ smtp.smtps.trust|lower }}"
 spring.mail.properties.mail.smtps.timeout: {{ smtp.smtps.timeout|default('8000') }}
+spring.mail.properties.mail.smtps.ssl.protocols: {{ smtp.smtps.ssl.protocols}}
 {% endif %}