To restrict StoreFront to only use TLS 1.1 and above, complete the server OS registry modification as mention in the following Microsoft TechNet article - https://technet.microsoft.com/en-us/library/dn786418.aspx#BKMK_SchannelTR_TLS11