Support Tip: How to update your Intune Exchange Connector to use TLS 1.2

This post has been republished via RSS; it originally appeared at: Intune Customer Success articles.

Intune has moved to support the Transport Layer Security  (TLS) 1.2+. However, the Intune Exchange Connector has not updated yet. We expect in the next month or so that we'll release an updated Microsoft Intune Exchange Connector to support the TLS 1.2+. If you don't want to wait until that connector is available, you can use the registry key changes from this docs page: https://docs.microsoft.com/en-us/dotnet/framework/network-programming/tls to update the connector. You'll have a Message Center post today - MC207032 - if your organization is still using an  Exchange Connector with TLS 1.0. 

 

Here's the set of registry key changes that will move your Connector to TLS 1.2. We've heard success from several customers that followed the steps listed on the docs page links above. 
 
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727]
"SystemDefaultTlsVersions"=dword:00000001
"SchUseStrongCrypto"=dword:00000001
 
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v4.0.30319]
"SystemDefaultTlsVersions"=dword:00000001
"SchUseStrongCrypto"=dword:00000001
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727]
"SystemDefaultTlsVersions"=dword:00000001
"SchUseStrongCrypto"=dword:00000001
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v4.0.30319]
"SystemDefaultTlsVersions"=dword:00000001
"SchUseStrongCrypto"=dword:00000001
 
This registry key change will move the connector to TLS 1.2+.

 

If you aren't on an urgent timeline to move to TLS 1.2+, then the updated Exchange Connector should be made available for your use in an upcoming release. Again, we'll post a Message Center post and update this blog when that releases.  

Leave a Reply

Your email address will not be published. Required fields are marked *

*

This site uses Akismet to reduce spam. Learn how your comment data is processed.