Quick update on the issue: https://www.cisco.com/c/dam/en/us/td/docs/security/security_management/sma/sma10-0/SMA_10-0_Release_Notes.pdf states TLS 1.2 support in 10.1.0-052 on page 2, but this is for Web Security Appliances, not for the SMA. I wonde...

Apparently, the release notes are wrong. I just updated to 10.1.0-052, but the CLI still only shows TLS 1.0.