Home
%3CLINGO-SUB%20id%3D%22lingo-sub-280118%22%20slang%3D%22en-US%22%3EIntune%20moving%20to%20TLS%201.2%20for%20encryption%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-280118%22%20slang%3D%22en-US%22%3E%3CP%3E%3CSTRONG%3E%20First%20published%20on%20TechNet%20on%20Jun%2005%2C%202018%20%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3EUpdate%207%2F9%2F2019%3A%26nbsp%3B%3C%2FSTRONG%3EIntune%20will%20block%20TLS%201.0%20and%20TLS%201.1%20starting%20October%201%2C%202019.%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3EUpdate%203%2F13%2F2019%3A%26nbsp%3B%3C%2FSTRONG%3EApple%20has%20moved%20to%20TLS%201.2%3B%20updated%20the%20text%20below.%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3EUpdate%2012%2F11%2F2018%3A%26nbsp%3B%3C%2FSTRONG%3EThe%20move%20to%20TLS%201.2%20is%20now%20in%20effect.%20Please%20upgrade%20your%20environment%20to%20TLS1.2%2B.%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3EUpdate%2011%2F1%2F2018%3A%26nbsp%3B%3C%2FSTRONG%3E%3CFONT%3EThe%20move%20to%20support%20TLS%201.2%20is%20in%20progress%20but%20could%20take%20up%20to%20December%20to%20take%20effect.%20Please%20continue%20to%20upgrade%20your%20environment%20to%20TLS%201.2%2B%20as%20soon%20as%20possible%20to%20prepare%20for%20this%20industry-wide%20shift%20to%20best-in-class%20encryption.%3C%2FFONT%3E%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3EUpdate%209%2F10%2F2018%20%3C%2FSTRONG%3E%20%3A%20We%20are%20also%20moving%20the%20Company%20Portal%20to%20support%20TLS%201.2%20starting%20October%2031%2C%202018.%20%3CBR%20%2F%3E%3CBR%20%2F%3EStarting%20on%20October%2031%2C%202018%2C%20Intune%20will%20move%20to%20just%20support%20Transport%20Layer%20Security%20(TLS)%201.2%20to%20provide%20best-in-class%20encryption%2C%20to%20ensure%20our%20service%20is%20more%20secure%20by%20default%2C%20and%20to%20align%20with%20other%20Microsoft%20services%20such%20as%20Microsoft%20Office%20365.%20Office%20has%20published%20a%20support%20post%20here%3A%20%3CA%20href%3D%22https%3A%2F%2Fsupport.microsoft.com%2Fhelp%2F4057306%2Fpreparing-for-tls-1-2-in-office-365%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%20https%3A%2F%2Fsupport.microsoft.com%2Fhelp%2F4057306%2Fpreparing-for-tls-1-2-in-office-365%20%3C%2FA%3E%20that%20discusses%20much%20of%20the%20details%20related%20to%20this%20change.%20In%20this%20post%2C%20we%20share%20a%20list%20of%20the%20devices%20and%20browsers%20that%20will%20not%20be%20able%20to%20work%20with%20TLS%201.2.%20Note%2C%20none%20of%20these%20devices%20are%20supported%20today%20by%20Intune.%20However%2C%20the%20devices%20may%20still%20be%20receiving%20policy%20and%20checking%20into%20the%20service.%20%3CBR%20%2F%3E%3CBR%20%2F%3EDevices%20and%20browsers%20that%20don%E2%80%99t%20support%20TLS%201.2%20include%3A%20%3CBR%20%2F%3E%3CBR%20%2F%3E%3C%2FP%3E%0A%3CUL%3E%0A%3CUL%3E%0A%3CLI%3EAndroid%202.3.7%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CUL%3E%0A%3CUL%3E%0A%3CLI%3EAndroid%204.0.4%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CUL%3E%0A%3CUL%3E%0A%3CLI%3EAndroid%204.1.1%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CUL%3E%0A%3CUL%3E%0A%3CLI%3EAndroid%204.2.2%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CUL%3E%0A%3CUL%3E%0A%3CLI%3EAndroid%204.3%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CUL%3E%0A%3CUL%3E%0A%3CLI%3EBaidu%20Jan%202015%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CUL%3E%0A%3CUL%3E%0A%3CLI%3EIE%207%20%2F%20Vista%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CUL%3E%0A%3CUL%3E%0A%3CLI%3EIE%208%20%2F%20XP%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CUL%3E%0A%3CUL%3E%0A%3CLI%3EIE%208-10%20%2F%20Win%207%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CUL%3E%0A%3CUL%3E%0A%3CLI%3EIE%2010%20%2F%20Win%20Phone%208.0%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CUL%3E%0A%3CUL%3E%0A%3CLI%3EJava%206u45%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CUL%3E%0A%3CUL%3E%0A%3CLI%3EJava%207u25%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CUL%3E%0A%3CUL%3E%0A%3CLI%3EOpenSSL%200.9.8y%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CUL%3E%0A%3CUL%3E%0A%3CLI%3ESafari%205.1.9%20%2F%20OS%20X%2010.6.8%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CUL%3E%0A%3CUL%3E%0A%3CLI%3ESafari%206.0.4%20%2F%20OS%20X%2010.8.4%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3C%2FUL%3E%0A%3CP%3E%3CBR%20%2F%3E%3CBR%20%2F%3E%3CSTRIKE%3EOne%20additional%20note%20%E2%80%93%20Over%20a%20year%20ago%2C%20we%20posted%20about%20Apple%20moving%20to%20ATS%2C%20which%20includes%20TLS%201.2.%20Apple%20has%20not%20yet%20made%20that%20move%20and%20we%20will%20continue%20to%20keep%20this%20support%20blog%20post%20updated%3A%20%3CA%20href%3D%22https%3A%2F%2Fblogs.technet.microsoft.com%2Fintunesupport%2F2017%2F02%2F25%2Fmeeting-apples-new-requirements-for-application-transport-security%2F%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%20https%3A%2F%2Fblogs.technet.microsoft.com%2Fintunesupport%2F2017%2F02%2F25%2Fmeeting-apples-new-requirements-for-application-transport-security%2F%20%3C%2FA%3E%20.%3C%2FSTRIKE%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-TEASER%20id%3D%22lingo-teaser-280118%22%20slang%3D%22en-US%22%3E%3CP%3EFirst%20published%20on%20TechNet%20on%20Jun%2005%2C%202018.%20Latest%20update%207%2F9%2F2019%3A%20we%20will%20block%20access%20from%20TLS%201.0%20and%20TLS%201.1%20starting%2010%2F1%2F2019.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-TEASER%3E%3CLINGO-LABS%20id%3D%22lingo-labs-280118%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EIntune%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3Etls%201%200%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3Etls%201%201%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3Etls%201%202%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3Etransport%20layer%20security%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E

First published on TechNet on Jun 05, 2018

 

Update 7/9/2019: Intune will block TLS 1.0 and TLS 1.1 starting October 1, 2019. 

Update 3/13/2019: Apple has moved to TLS 1.2; updated the text below. 

Update 12/11/2018: The move to TLS 1.2 is now in effect. Please upgrade your environment to TLS1.2+.

Update 11/1/2018: The move to support TLS 1.2 is in progress but could take up to December to take effect. Please continue to upgrade your environment to TLS 1.2+ as soon as possible to prepare for this industry-wide shift to best-in-class encryption.

Update 9/10/2018 : We are also moving the Company Portal to support TLS 1.2 starting October 31, 2018.

Starting on October 31, 2018, Intune will move to just support Transport Layer Security (TLS) 1.2 to provide best-in-class encryption, to ensure our service is more secure by default, and to align with other Microsoft services such as Microsoft Office 365. Office has published a support post here: https://support.microsoft.com/help/4057306/preparing-for-tls-1-2-in-office-365 that discusses much of the details related to this change. In this post, we share a list of the devices and browsers that will not be able to work with TLS 1.2. Note, none of these devices are supported today by Intune. However, the devices may still be receiving policy and checking into the service.

Devices and browsers that don’t support TLS 1.2 include:

    • Android 2.3.7

 

    • Android 4.0.4

 

    • Android 4.1.1

 

    • Android 4.2.2

 

    • Android 4.3

 

    • Baidu Jan 2015

 

    • IE 7 / Vista

 

    • IE 8 / XP

 

    • IE 8-10 / Win 7

 

    • IE 10 / Win Phone 8.0

 

    • Java 6u45

 

    • Java 7u25

 

    • OpenSSL 0.9.8y

 

    • Safari 5.1.9 / OS X 10.6.8

 

    • Safari 6.0.4 / OS X 10.8.4



One additional note – Over a year ago, we posted about Apple moving to ATS, which includes TLS 1.2. Apple has not yet made that move and we will continue to keep this support blog post updated: https://blogs.technet.microsoft.com/intunesupport/2017/02/25/meeting-apples-new-requirements-for-ap... .