Orchestrator TLS1.2

Question

I'm trying to install my Orchestrator environment and I'm confused by the reference to enable TLS1.2 support in the installation instructions. I was wondering if it could be enabled later.

Thank you in advance for any suggestions.

Answer 1

Hi,

you can enable TLS1,2 later.

But, for example

• if the SQL instance for the Orchestrator DB ist on a different system which only allowes TLS1.2
• or if the clienty for WebConsole or WebAPI only use TLS1.2

it must be enabled before, of course.

Regards,

Stefan

Answer 2

Hi,

TLS 1.2 is the secure way of communication suggested by Microsoft with best-in class encryption. SSL and early TLS are not considered strong cryptography and cannot be used as a security control. Microsoft has added official support for TLS1.2 security protocols in System Center 2016.

You can enable it in any time.

https://learn.microsoft.com/en-us/system-center/orchestrator/install-enable-tls?view=sc-orch-2022