Intune moving to TLS 1.2 for encryption

Published Oct 30 2018 11:34 AM 3,545 Views

First published on TechNet on Jun 05, 2018

 

Update on 11/9/2020: Intune has aligned with the M365 teams and is continuing TLS 1.2 rollout per https://docs.microsoft.com/microsoft-365/compliance/tls-1.0-and-1.1-deprecation-for-office-365?view=... 

Update 7/9/2019: Intune will block TLS 1.0 and TLS 1.1 starting October 1, 2019. 

Update 3/13/2019: Apple has moved to TLS 1.2; updated the text below. 

Update 12/11/2018: The move to TLS 1.2 is now in effect. Please upgrade your environment to TLS1.2+.

Update 11/1/2018: The move to support TLS 1.2 is in progress but could take up to December to take effect. Please continue to upgrade your environment to TLS 1.2+ as soon as possible to prepare for this industry-wide shift to best-in-class encryption.

Update 9/10/2018 : We are also moving the Company Portal to support TLS 1.2 starting October 31, 2018.

Intune is aligning to M365's timeline to support Transport Layer Security (TLS) 1.2 to provide best-in-class encryption, to ensure our service is more secure by default, and to align with other Microsoft services such as Microsoft Office 365. Office has published a support post here: https://docs.microsoft.com/microsoft-365/compliance/tls-1.0-and-1.1-deprecation-for-office-365?view=... that discusses much of the details related to this change. In this post, we share a list of the devices and browsers that will not be able to work with TLS 1.2. Note, none of these devices are supported today by Intune. However, the devices may still be receiving policy and checking into the service.

Devices and browsers that don’t support TLS 1.2:

    • Android 2.3.7

 

    • Android 4.0.4

 

    • Android 4.1.1

 

    • Android 4.2.2

 

    • Android 4.3

 

    • Baidu Jan 2015

 

    • IE 7 / Vista

 

    • IE 8 / XP

 

    • IE 8-10 / Win 7

 

    • IE 10 / Win Phone 8.0

 

    • Java 6u45

 

    • Java 7u25

 

    • OpenSSL 0.9.8y

 

    • Safari 5.1.9 / OS X 10.6.8

 

    • Safari 6.0.4 / OS X 10.8.4



One additional note – Over a year ago, we posted about Apple moving to ATS, which includes TLS 1.2. Apple has not yet made that move and we will continue to keep this support blog post updated: https://blogs.technet.microsoft.com/intunesupport/2017/02/25/meeting-apples-new-requirements-for-ap... .

%3CLINGO-SUB%20id%3D%22lingo-sub-280118%22%20slang%3D%22en-US%22%3EIntune%20moving%20to%20TLS%201.2%20for%20encryption%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-280118%22%20slang%3D%22en-US%22%3E%3CP%3E%3CSTRONG%3E%20First%20published%20on%20TechNet%20on%20Jun%2005%2C%202018%20%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3EUpdate%20on%2011%2F9%2F2020%3A%20%3C%2FSTRONG%3EIntune%20has%20aligned%20with%20the%20M365%20teams%20and%20is%20continuing%20TLS%201.2%20rollout%20per%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoft-365%2Fcompliance%2Ftls-1.0-and-1.1-deprecation-for-office-365%3Fview%3Do365-worldwide%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fmicrosoft-365%2Fcompliance%2Ftls-1.0-and-1.1-deprecation-for-office-365%3Fview%3Do365-worldwide%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRIKE%3E%3CSTRONG%3EUpdate%207%2F9%2F2019%3A%26nbsp%3B%3C%2FSTRONG%3EIntune%20will%20block%20TLS%201.0%20and%20TLS%201.1%20starting%20October%201%2C%202019.%26nbsp%3B%3C%2FSTRIKE%3E%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3EUpdate%203%2F13%2F2019%3A%26nbsp%3B%3C%2FSTRONG%3EApple%20has%20moved%20to%20TLS%201.2%3B%20updated%20the%20text%20below.%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3EUpdate%2012%2F11%2F2018%3A%26nbsp%3B%3C%2FSTRONG%3EThe%20move%20to%20TLS%201.2%20is%20now%20in%20effect.%20Please%20upgrade%20your%20environment%20to%20TLS1.2%2B.%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3EUpdate%2011%2F1%2F2018%3A%26nbsp%3B%3C%2FSTRONG%3E%3CFONT%3EThe%20move%20to%20support%20TLS%201.2%20is%20in%20progress%20but%20could%20take%20up%20to%20December%20to%20take%20effect.%20Please%20continue%20to%20upgrade%20your%20environment%20to%20TLS%201.2%2B%20as%20soon%20as%20possible%20to%20prepare%20for%20this%20industry-wide%20shift%20to%20best-in-class%20encryption.%3C%2FFONT%3E%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3EUpdate%209%2F10%2F2018%20%3C%2FSTRONG%3E%20%3A%20We%20are%20also%20moving%20the%20Company%20Portal%20to%20support%20TLS%201.2%20starting%20October%2031%2C%202018.%20%3CBR%20%2F%3E%3CBR%20%2F%3EIntune%20is%20aligning%20to%20M365's%20timeline%20to%20support%20Transport%20Layer%20Security%20(TLS)%201.2%20to%20provide%20best-in-class%20encryption%2C%20to%20ensure%20our%20service%20is%20more%20secure%20by%20default%2C%20and%20to%20align%20with%20other%20Microsoft%20services%20such%20as%20Microsoft%20Office%20365.%20Office%20has%20published%20a%20support%20post%20here%3A%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fmicrosoft-365%2Fcompliance%2Ftls-1.0-and-1.1-deprecation-for-office-365%3Fview%3Do365-worldwide%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fmicrosoft-365%2Fcompliance%2Ftls-1.0-and-1.1-deprecation-for-office-365%3Fview%3Do365-worldwide%3C%2FA%3E%20that%20discusses%20much%20of%20the%20details%20related%20to%20this%20change.%20In%20this%20post%2C%20we%20share%20a%20list%20of%20the%20devices%20and%20browsers%20that%20will%20not%20be%20able%20to%20work%20with%20TLS%201.2.%20Note%2C%20none%20of%20these%20devices%20are%20supported%20today%20by%20Intune.%20However%2C%20the%20devices%20may%20still%20be%20receiving%20policy%20and%20checking%20into%20the%20service.%20%3CBR%20%2F%3E%3CBR%20%2F%3EDevices%20and%20browsers%20that%20don%E2%80%99t%20support%20TLS%201.2%3A%20%3CBR%20%2F%3E%3CBR%20%2F%3E%3C%2FP%3E%0A%3CUL%3E%0A%3CUL%3E%0A%3CLI%3EAndroid%202.3.7%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CUL%3E%0A%3CUL%3E%0A%3CLI%3EAndroid%204.0.4%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CUL%3E%0A%3CUL%3E%0A%3CLI%3EAndroid%204.1.1%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CUL%3E%0A%3CUL%3E%0A%3CLI%3EAndroid%204.2.2%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CUL%3E%0A%3CUL%3E%0A%3CLI%3EAndroid%204.3%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CUL%3E%0A%3CUL%3E%0A%3CLI%3EBaidu%20Jan%202015%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CUL%3E%0A%3CUL%3E%0A%3CLI%3EIE%207%20%2F%20Vista%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CUL%3E%0A%3CUL%3E%0A%3CLI%3EIE%208%20%2F%20XP%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CUL%3E%0A%3CUL%3E%0A%3CLI%3EIE%208-10%20%2F%20Win%207%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CUL%3E%0A%3CUL%3E%0A%3CLI%3EIE%2010%20%2F%20Win%20Phone%208.0%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CUL%3E%0A%3CUL%3E%0A%3CLI%3EJava%206u45%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CUL%3E%0A%3CUL%3E%0A%3CLI%3EJava%207u25%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CUL%3E%0A%3CUL%3E%0A%3CLI%3EOpenSSL%200.9.8y%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CUL%3E%0A%3CUL%3E%0A%3CLI%3ESafari%205.1.9%20%2F%20OS%20X%2010.6.8%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CUL%3E%0A%3CUL%3E%0A%3CLI%3ESafari%206.0.4%20%2F%20OS%20X%2010.8.4%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3C%2FUL%3E%0A%3CP%3E%3CBR%20%2F%3E%3CBR%20%2F%3E%3CSTRIKE%3EOne%20additional%20note%20%E2%80%93%20Over%20a%20year%20ago%2C%20we%20posted%20about%20Apple%20moving%20to%20ATS%2C%20which%20includes%20TLS%201.2.%20Apple%20has%20not%20yet%20made%20that%20move%20and%20we%20will%20continue%20to%20keep%20this%20support%20blog%20post%20updated%3A%20%3CA%20href%3D%22https%3A%2F%2Fblogs.technet.microsoft.com%2Fintunesupport%2F2017%2F02%2F25%2Fmeeting-apples-new-requirements-for-application-transport-security%2F%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3E%20https%3A%2F%2Fblogs.technet.microsoft.com%2Fintunesupport%2F2017%2F02%2F25%2Fmeeting-apples-new-requirements-for-application-transport-security%2F%20%3C%2FA%3E%20.%3C%2FSTRIKE%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-TEASER%20id%3D%22lingo-teaser-280118%22%20slang%3D%22en-US%22%3E%3CP%3EFirst%20published%20on%20TechNet%20on%20Jun%2005%2C%202018.%20Latest%20update%207%2F9%2F2019%3A%20we%20will%20block%20access%20from%20TLS%201.0%20and%20TLS%201.1%20starting%2010%2F1%2F2019.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-TEASER%3E%3CLINGO-LABS%20id%3D%22lingo-labs-280118%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EIntune%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3Etls%201%200%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3Etls%201%201%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3Etls%201%202%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3Etransport%20layer%20security%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Version history
Last update:
‎Nov 09 2020 08:51 PM
Updated by: