Blog Post

Exchange Team Blog
3 MIN READ

New opt-in endpoint available for SMTP AUTH clients still needing legacy TLS

The_Exchange_Team's avatar
The_Exchange_Team
Icon for Microsoft rankMicrosoft
Aug 18, 2021
Update (April 2023): For Microsoft 365 operated by 21Vianet, TLS1.0 and TLS1.1 for SMTP AUTH will no longer be supported after June 30, 2023. We will be disabling TLS 1.0 and TLS 1.1 usage with SMTP,...
Updated Apr 13, 2023
Version 5.0
announcements
Exchange Online
Tips 'n Tricks
transport
DNewb860's avatar
DNewb860
Copper Contributor
Jan 24, 2022

My issue with Database Mail not sending messages through TLS 1.2 has been fixed with reference to article  https://www.itnota.com/enabling-tls-1-2-default-security-protocol-windows-servers/ referenced above (Thanks RyanW96).  In my case, SQL Server 2014 sp3 is installed on a Windows 2019 Enterprise VM.  In both cases, everything I read about TLS 1.2 said that my system should be able to send over TLS 1.2, but it was sending at TLS 1.0.  

 

Adding the registry keys mentioned in this article in addition to adding a few other keys that were not present, Database mail is now sending through TLS 1.2.  The keys I added are as follows (I had to add all of these keys since the only thing under SCHANNEL was SSL 2.0:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Security\Providers\SCHANNEL\Protocols\TLS 1.0\Server\ and \Client\

   DWORD = DisableByDefault - set to 1

    DWord = Enabled - set to 1

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Security\Providers\SCHANNEL\Protocols\TLS 1.1\Server\ and \Client\

   DWORD = DisableByDefault - set to 1

    DWord = Enabled - set to 1

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Security\Providers\SCHANNEL\Protocols\TLS 1.2\Server\ and \Client\

   DWORD = DisableByDefault - set to 0

    DWord = Enabled - set to 1

 

Added DWORD keys as shown below:

HKey_LOCAL_MACHINE\SOFTWARE\Microsoft\.NetFramework\v2.0.50727

Added Dword - SystemDefualtTLSVersions - set to 1

Added Dword - SchUseStrongCrypto - set to 1

HKey_LOCAL_MACHINE\SOFTWARE\Microsoft\.NetFramework\v4.0.30319

Added Dword - SystemDefualtTLSVersions - set to 1

Added Dword - SchUseStrongCrypto - set to 1

 

Added DWORD keys as shown below (for 64-bit OS):

HKey_LOCAL_MACHINE\SOFTWARE\Microsoft\.NetFramework\v2.0.50727

Added Dword - SystemDefualtTLSVersions - set to 1

Added Dword - SchUseStrongCrypto - set to 1

HKey_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NetFramework\v4.0.30319

Added Dword - SystemDefualtTLSVersions - set to 1

Added Dword - SchUseStrongCrypto - set to 1

 

Added the following Keys and Dword (this key was not present)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\InternetSettings\WinHTTP

   DWORD = DefaultSecureProtocols - set to 800

Added the following Keys and Dword (for 64-bit OS)

HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\InternetSettings\WinHTTP

   DWORD = DefaultSecureProtocols - set to 800

 

Reboot the SQL Server after adding all of these keys.  Test using Database Mail.