Only the values 0 or 1 are accepted and determined to be properly configured. NET Framework will inherit its defaults from the Windows Schannel DisabledByDefault registry values or not.Īn invalid TLS configuration can cause issues within Exchange for communication. We also check for the SystemDefaultTlsVersions registry value which controls if.

If detected to be anything but disabled on Exchange, it will be thrown as an error and needs to be addressed right away. Due to the potential for future protocol downgrade attacks and other TLS 1.0 vulnerabilities not specific to Microsoft's implementation, it is recommended that dependencies on all security protocols older than TLS 1.2 be removed where possible (TLS 1.1/1.0/ SSLv3/SSLv2).Īt this time TLS 1.3 is not supported by Exchange and has been known to cause issues if enabled. Microsoft's TLS 1.0 implementation is free of known security vulnerabilities. We will also show a yellow warning, if TLS 1.0 and/or TLS 1.1 is enabled. This is important because Exchange can be both a client and a server. We can detect mismatches in TLS versions for client and server. We check and validate Exchange servers TLS 1.0 - 1.3 configuration.

Windows server test tls 1.2 support