1 min read

Azure AD – Ensure you have TLS 1.2 enabled on your on-premises systems interacting with Azure AD

cubesys : May 27, 2021 12:00:00 AM

Azure AD

imageAs announced in early November 2020, support for old versions of TLS (TLS 1.0 and TLS 1.1) and ciphers (3DES cipher suite) are going to be deprecated and no longer supported starting June 30, 2021.

You have to ensure your on-premises systems interacting with Azure AD – such as Azure AD Connect, Azure AD Application Proxy, Active Directory Federation Services, NPS Extension for Azure AD MFA…) – have TLS 1.2 support enabled.

Windows Server 2012 R2 and later natively support TLS 1.2, unless you have explicitly disabled it. For older version, you need to have deployed the KB 3140245 (https://support.microsoft.com/help/3140245).

You can confirm you have TLS 1.2 support enabled by checking the below registry keys:

  • HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Client
    • “DisabledByDefault”: 00000000
    • “Enabled”: 00000001
  • HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Server
    • “DisabledByDefault”: 00000000
    • “Enabled”: 00000001
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft.NETFramework\v4.0.30319
    • “SchUseStrongCrypto”: 00000001
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft.NETFramework\v2.0.50727
    • “SystemDefaultTlsVersions”: 00000001
    • “SchUseStrongCrypto”: 00000001
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft.NETFramework\v4.0.30319
    • “SystemDefaultTlsVersions”: 00000001
    • “SchUseStrongCrypto”: 00000001

Azure – You can now use shared disks in Azure for your clustered workloads

cubesys : Feb 18, 2020 12:00:00 AM

With this new capability added to Azure, you can now deploy/migrate your clustered workloads on Azure virtual machines.

Azure
Read More

Azure AD Connect – A new version of Azure AD Connect has been released and supports the v2 endpoint API

cubesys : Jun 1, 2020 12:00:00 AM

By now, you should already know that Azure Active Directory Connect (AAD Connect) is the directory synchronization tool used to synchronize your...

Azure AD Azure AD Connect
Read More

Exchange Online – New endpoint for SMTP AUTH clients still using TLS 1.0 or TLS 1.1; act before 2022

cubesys : Aug 19, 2021 12:00:00 AM

If you use Office 365 and Exchange Online, you should already know that support for TLS 1.0 and TLS 1.1 has ended in October 2020.

Office 365 Exchange
Read More