{"id":68785,"date":"2017-06-20T09:00:46","date_gmt":"2017-06-20T16:00:46","guid":{"rendered":"http:\/\/blogs.microsoft.com\/microsoftsecure\/?p=68785"},"modified":"2023-05-15T23:11:17","modified_gmt":"2023-05-16T06:11:17","slug":"tls-1-2-support-at-microsoft","status":"publish","type":"post","link":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2017\/06\/20\/tls-1-2-support-at-microsoft\/","title":{"rendered":"TLS 1.2 support at Microsoft"},"content":{"rendered":"<p><em>This post is authored by Andrew Marshall, Principal Security Program Manager, Trustworthy Computing Security<\/em>.<\/p>\n<p>In support of our commitment to use best-in-class encryption, Microsoft\u2019s engineering teams are continually upgrading our cryptographic infrastructure. A current area of focus for us is support for TLS 1.2, this involves not only removing the technical hurdles to deprecating older security protocols, but also minimizing the customer impact of these changes. To share our recent experiences in engaging with this work we are today announcing the publication of the \u201c<a href=\"https:\/\/www.microsoft.com\/en-us\/download\/details.aspx?id=55266\">Solving the TLS 1.0 Problem<\/a>\u201d whitepaper to aid customers in removing dependencies on TLS 1.0\/1.1. Microsoft is also working on new functionality to help you assess the impact to your own customers when making these changes.<\/p>\n<h2>What can I do today?<\/h2>\n<p>Microsoft recommends customers proactively address weak TLS usage by removing TLS 1.0\/1.1 dependencies in their environments and disabling TLS 1.0\/1.1 at the operating system level where possible. Given the length of time TLS 1.0\/1.1 has been supported by the software industry, it is highly recommended that any TLS 1.0\/1.1 deprecation plan include the following:<\/p>\n<ul>\n<li>Application code analysis to find\/fix hardcoded instances of TLS 1.0\/1.1.<\/li>\n<li>Network endpoint scanning and traffic analysis to identify operating systems using TLS 1.0\/1.1 or older protocols.<\/li>\n<li>Full regression testing through your entire application stack with TLS 1.0\/1.1 and all older security protocols disabled.<\/li>\n<li>Migration of legacy operating systems and development libraries\/frameworks to versions capable of negotiating TLS 1.2.<\/li>\n<li>Compatibility testing across operating systems used by your business to identify any TLS 1.2 support issues.<\/li>\n<li>Coordination with your own business partners and customers to notify them of your move to deprecate TLS 1.0\/1.1.<\/li>\n<li>Understanding which clients may be broken by disabling TLS 1.0\/1.1.<\/li>\n<\/ul>\n<h2>Coming soon<\/h2>\n<p>To help customers deploy the latest security protocols, we are announcing today that Microsoft will provide support for TLS 1.2 in Windows Server 2008 later this summer.<\/p>\n<h2>In conclusion<\/h2>\n<p>Learn more about removing dependencies on TLS 1.0\/1.1 with this helpful resource:<br \/>\n<strong>\u201c<a href=\"https:\/\/www.microsoft.com\/en-us\/download\/details.aspx?id=55266\">Solving the TLS 1.0 Problem<\/a>\u201d <\/strong>whitepaper.<\/p>\n<p>Stay tuned for upcoming feature announcements in support of this work.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>To share our recent experiences in engaging with this work we are today announcing the publication of the \u201cSolving the TLS 1.0 Problem\u201d whitepaper to aid customers in removing dependencies on TLS 1.0\/1.1. <\/p>\n","protected":false},"author":49,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"ep_exclude_from_search":false,"_classifai_error":"","footnotes":""},"content-type":[3662],"topic":[],"products":[],"threat-intelligence":[],"tags":[],"coauthors":[1957],"class_list":["post-68785","post","type-post","status-publish","format-standard","hentry","content-type-news"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v23.4 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>TLS 1.2 support at Microsoft | Microsoft Security Blog<\/title>\n<meta name=\"description\" content=\"To share our recent experiences in engaging with this work we are today announcing the publication of the \u201cSolving the TLS 1.0 Problem\u201d whitepaper to aid customers in removing dependencies on TLS 1.0\/1.1.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2017\/06\/20\/tls-1-2-support-at-microsoft\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"TLS 1.2 support at Microsoft | Microsoft Security Blog\" \/>\n<meta property=\"og:description\" content=\"To share our recent experiences in engaging with this work we are today announcing the publication of the \u201cSolving the TLS 1.0 Problem\u201d whitepaper to aid customers in removing dependencies on TLS 1.0\/1.1.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2017\/06\/20\/tls-1-2-support-at-microsoft\/\" \/>\n<meta property=\"og:site_name\" content=\"Microsoft Security Blog\" \/>\n<meta property=\"article:published_time\" content=\"2017-06-20T16:00:46+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-05-16T06:11:17+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2018\/08\/cropped-microsoft_logo_element.png\" \/>\n\t<meta property=\"og:image:width\" content=\"512\" \/>\n\t<meta property=\"og:image:height\" content=\"512\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Microsoft Secure Blog Staff\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Microsoft Secure Blog Staff\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2017\/06\/20\/tls-1-2-support-at-microsoft\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2017\/06\/20\/tls-1-2-support-at-microsoft\/\"},\"author\":[{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/author\/trustedcloudteam\/\",\"@type\":\"Person\",\"@name\":\"Microsoft Secure Blog Staff\"}],\"headline\":\"TLS 1.2 support at Microsoft\",\"datePublished\":\"2017-06-20T16:00:46+00:00\",\"dateModified\":\"2023-05-16T06:11:17+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2017\/06\/20\/tls-1-2-support-at-microsoft\/\"},\"wordCount\":330,\"publisher\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#organization\"},\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2017\/06\/20\/tls-1-2-support-at-microsoft\/\",\"url\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2017\/06\/20\/tls-1-2-support-at-microsoft\/\",\"name\":\"TLS 1.2 support at Microsoft | Microsoft Security Blog\",\"isPartOf\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#website\"},\"datePublished\":\"2017-06-20T16:00:46+00:00\",\"dateModified\":\"2023-05-16T06:11:17+00:00\",\"description\":\"To share our recent experiences in engaging with this work we are today announcing the publication of the \u201cSolving the TLS 1.0 Problem\u201d whitepaper to aid customers in removing dependencies on TLS 1.0\/1.1.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2017\/06\/20\/tls-1-2-support-at-microsoft\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2017\/06\/20\/tls-1-2-support-at-microsoft\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2017\/06\/20\/tls-1-2-support-at-microsoft\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"TLS 1.2 support at Microsoft\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#website\",\"url\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/\",\"name\":\"Microsoft Security Blog\",\"description\":\"Expert coverage of cybersecurity topics\",\"publisher\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#organization\",\"name\":\"Microsoft Security Blog\",\"url\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2018\/08\/cropped-cropped-microsoft_logo_element.png\",\"contentUrl\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2018\/08\/cropped-cropped-microsoft_logo_element.png\",\"width\":512,\"height\":512,\"caption\":\"Microsoft Security Blog\"},\"image\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#\/schema\/logo\/image\/\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"TLS 1.2 support at Microsoft | Microsoft Security Blog","description":"To share our recent experiences in engaging with this work we are today announcing the publication of the \u201cSolving the TLS 1.0 Problem\u201d whitepaper to aid customers in removing dependencies on TLS 1.0\/1.1.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2017\/06\/20\/tls-1-2-support-at-microsoft\/","og_locale":"en_US","og_type":"article","og_title":"TLS 1.2 support at Microsoft | Microsoft Security Blog","og_description":"To share our recent experiences in engaging with this work we are today announcing the publication of the \u201cSolving the TLS 1.0 Problem\u201d whitepaper to aid customers in removing dependencies on TLS 1.0\/1.1.","og_url":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2017\/06\/20\/tls-1-2-support-at-microsoft\/","og_site_name":"Microsoft Security Blog","article_published_time":"2017-06-20T16:00:46+00:00","article_modified_time":"2023-05-16T06:11:17+00:00","og_image":[{"width":512,"height":512,"url":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2018\/08\/cropped-microsoft_logo_element.png","type":"image\/png"}],"author":"Microsoft Secure Blog Staff","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Microsoft Secure Blog Staff","Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2017\/06\/20\/tls-1-2-support-at-microsoft\/#article","isPartOf":{"@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2017\/06\/20\/tls-1-2-support-at-microsoft\/"},"author":[{"@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/author\/trustedcloudteam\/","@type":"Person","@name":"Microsoft Secure Blog Staff"}],"headline":"TLS 1.2 support at Microsoft","datePublished":"2017-06-20T16:00:46+00:00","dateModified":"2023-05-16T06:11:17+00:00","mainEntityOfPage":{"@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2017\/06\/20\/tls-1-2-support-at-microsoft\/"},"wordCount":330,"publisher":{"@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#organization"},"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2017\/06\/20\/tls-1-2-support-at-microsoft\/","url":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2017\/06\/20\/tls-1-2-support-at-microsoft\/","name":"TLS 1.2 support at Microsoft | Microsoft Security Blog","isPartOf":{"@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#website"},"datePublished":"2017-06-20T16:00:46+00:00","dateModified":"2023-05-16T06:11:17+00:00","description":"To share our recent experiences in engaging with this work we are today announcing the publication of the \u201cSolving the TLS 1.0 Problem\u201d whitepaper to aid customers in removing dependencies on TLS 1.0\/1.1.","breadcrumb":{"@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2017\/06\/20\/tls-1-2-support-at-microsoft\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.microsoft.com\/en-us\/security\/blog\/2017\/06\/20\/tls-1-2-support-at-microsoft\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2017\/06\/20\/tls-1-2-support-at-microsoft\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/"},{"@type":"ListItem","position":2,"name":"TLS 1.2 support at Microsoft"}]},{"@type":"WebSite","@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#website","url":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/","name":"Microsoft Security Blog","description":"Expert coverage of cybersecurity topics","publisher":{"@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#organization","name":"Microsoft Security Blog","url":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2018\/08\/cropped-cropped-microsoft_logo_element.png","contentUrl":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2018\/08\/cropped-cropped-microsoft_logo_element.png","width":512,"height":512,"caption":"Microsoft Security Blog"},"image":{"@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#\/schema\/logo\/image\/"}}]}},"msxcm_display_generated_audio":false,"distributor_meta":false,"distributor_terms":false,"distributor_media":false,"distributor_original_site_name":"Microsoft Security Blog","distributor_original_site_url":"https:\/\/www.microsoft.com\/en-us\/security\/blog","push-errors":false,"_links":{"self":[{"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/posts\/68785"}],"collection":[{"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/users\/49"}],"replies":[{"embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/comments?post=68785"}],"version-history":[{"count":0,"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/posts\/68785\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/media?parent=68785"}],"wp:term":[{"taxonomy":"content-type","embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/content-type?post=68785"},{"taxonomy":"topic","embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/topic?post=68785"},{"taxonomy":"products","embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/products?post=68785"},{"taxonomy":"threat-intelligence","embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/threat-intelligence?post=68785"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/tags?post=68785"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/coauthors?post=68785"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}