Need to download KB3135244 to allow TLS 1.2 on SQL Server 2008 SP4.

Question

Running SQL Server 2008 SP4 (10.0.6000.29). Can no longer connect via Zapier, which requires TLS 1.2. We plan to upgrade to SQL Server 2016 this year, but as a workaround to avoid data loss on mission critical systems, can we install KB3135244 to allow TLS 1.2? This hotfix is not available online.

Answer 1

Hi @Mark Ely ,

You cannot download KB3135244 separately anymore.

For SQL Server 2008 SP4, TLS 1.2 is enabled only through later security updates (superseding KB3135244).

• Upgrade SQL Server to build 10.0.6547.0 or higher (via latest SP4 security update KB4057114)

Also check with

• TLS 1.2 is enabled on the OS
• Restart SQL Server after update

Do not look for KB3135244 install the latest SP4 update to enable TLS 1.2.

Thanks,
Akhil.

Answer 2

KB3135244 is the original TLS 1.2 support update for SQL Server, but for SQL Server 2008 SP4 you should not look for that specific hotfix package anymore.

For SQL Server 2008 SP4 (10.0.6000.29), TLS 1.2 support is provided through later security updates that supersede the original KB3135244 bits:

• TLS 1.2 support for SQL Server 2008 SP4 (x86/x64) is available in the latest cumulative update for SQL Server 2008 SP4, documented in KB4057114.
• The TLS 1.2 support article explicitly lists SQL Server 2008 SP4 with an initial TLS 1.2 build of 10.0.6547.0 and points to KB4057114 as the current update that includes TLS 1.2.

Additionally, Microsoft has published updated versions of SQL Server 2008 and 2008 R2 that fix a defect in the original TLS 1.2 update from KB3135244. The guidance is to install the updated TLS 1.2 support builds referenced by KB3135244, not the original hotfix itself:

• The resolution for the intermittent service termination issue states that customers should install the TLS 1.2 support updates described in KB3135244 and that updated versions of SQL Server 2008/2008 R2 have been published to address the defect in the original TLS 1.2 update.

Therefore, to enable TLS 1.2 on SQL Server 2008 SP4 and avoid the known issues with the original KB3135244 package:

1. Upgrade the SQL Server 2008 SP4 instance to a build that includes TLS 1.2 support (10.0.6547.0 or later) by installing the latest cumulative/security update for SQL Server 2008 SP4 as documented in KB4057114.
2. Ensure the operating system supports and has TLS 1.2 enabled (Windows Server 2008 R2 or later per the TLS 1.2 support article).

Installing the superseding TLS 1.2 support update (KB4057114 build level or later) is the supported way to enable TLS 1.2; the original standalone KB3135244 hotfix is not required and is not the recommended package to deploy.

---

References:

• TLS 1.2 support for Microsoft SQL Server
• Intermittent service terminations occur after you install any SQL Server 2008 or SQL Server 2008 R2 versions from KB3135244