Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Customers using Updox Central on a server with Microsoft Windows 7 or Server 2008 R2 (Also applies to Small business server 2011) and some Server 2012 installations. are required to add a patch that Microsoft released. To verify connectivity:


...

Luckily enough, this can be fixed by setting your OS to never use TLS 1.0 anymore, and use TLS 1.1 and 1.2 by default. Here’s a small guide explaining how you can do that.

Step 1. Install the KB3140245 Security Patch

The first thing to do is to download and install the Windows KB3140245: you can do that using Windows Update, since it’s available as an optional update, or manually download it from the following official website:

...

This will equip your OS with TLS versions 1.1 and 1.2.

Step 2. Updating your Windows Registry File

The next step you need to do is to patch your Windows Registry file, so that your OS will actually use the new TLS protocol versions (1.2, and 1.1 as a fallback) instead of outdated and vulnerable 1.0. This can be done either automatically (with an official Microsoft-released patch file) or by manually editing the registry file using regedit.

Microsoft Patch File

The Microsoft patch file is called MicrosoftEasyFix51044.msi and can be downloaded from this url:

Step 3. Enable TLS 1.1 and 1.2 at the SChannel component level

The second thing to do, as explained in this TechNet article, is to create another DWORD key called DisabledByDefault in the following sections of your registry:

...