Tuesday, August 8, 2017

Enable and Set as Default TLS 1.2 on Windows 7 and Windows 2008 R2

I had to ensure that TLS 1.2 is being used on a Windows 2008 R2 server, and was using a Windows 7 workstation to test it.  Just some quick notes on the whole process.

I had to update Windows 2008 R2 to Service Pack 1 as the first step.  Windows 7 must be on SP1 as well.

Microsoft KB 3080079 adds support for TLS 1.1 and 1.2 for Windows 7 SP1 and Windows 2008 R2 SP1 but DOES NOT force use of it (see later steps):
https://support.microsoft.com/en-us/help/3080079

Apply KB3140245 to Windows 2008 R2 SP1 server and to Windows 7 SP1.  This KB gives the ability to set TLS 1.2 as the default protocol.  The article also explains how to set it as default on both Win 7 and Win 2008 R2:
https://support.microsoft.com/en-us/help/3140245/update-to-enable-tls-1-1-and-tls-1-2-as-a-default-secure-protocols-in

Enable TLS 1.2 on Windows Server 2008 R2 SP1 and Win 7 SP1 after the above KBs are installed.  The article applies to Windows 7 SP1 also, though it doesn’t state that:
https://support.quovadisglobal.com/kb/a433/how-to-enable-tls-1_2-on-windows-server-2008-r2.aspx

Windows 7 and Win2008R2 TLS/SSL settings reference.  More info than you need to simply enable TLS 1.2, but might be useful:
https://technet.microsoft.com/en-us/library/dn786418(v=ws.11).aspx

No comments:

Post a Comment