Posts

Showing posts from December, 2015

enable TLS 1.2 and disabling TLS1.0 and SSL 3 on all exchange servers and Clients

Image
1)       Table depicting support for various SSL/TLS versions on different Windows OS   2)       SMTP – key piece of Exchange server infrastructure – support for TLS 1.1 and 1.2 were added in Exchange Server 2013 CU8 and Exchange Server 2010 SP3 RU9. This means if you want to add support for the latest ciphers and TLS versions, you may need to apply an update. 3)        Disable SSL  3.0 on all windows exchange servers Steps to disable support for the SSL 3.0 protocol on Windows by following these steps: ·          Click Start, click Run, type regedt32 or type regedit, and then click OK. ·          In Registry Editor, locate the following registry key: ·          HKey_Local_Machine\System\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 3.0\Server ·          Note If the complete registry key path does not exist, you can create it by expanding the available keys and using the New -> Key opti