SCCM CB 1910 - security protocol

Question

Hi All,

I need advice on the below please

I have Sccm server which is running on windows server 2016 and I have clients from win2012/windows 10

if I enable TLS 1.2 in SCCM server and if the client doesn’t support TLS 1.2. This may orphan the client communication. Instead can I use TLS fallback SCSV mechanism If it is doable as a security protocol in SCCM server does it still cause any problem in client communication. Please suggest

Answer 1

Windows Server 2012, don't enable TLS 1.1 or TLS 1.2 by default for secure communications using WinHTTP. For these earlier versions of Windows, install Update 3140245 to enable the registry value.
For the details, you may refer to:
https://learn.microsoft.com/en-us/mem/configmgr/core/plan-design/security/enable-tls-1-2-client#bkmk_winhttp

---

If the response is helpful, please click "Accept Answer" and upvote it.