TLS 1.2 Office 365 Mandatory - Couple of thoughts

[Mitch King]

Rather than going to do the dirty work myself and check, I am wondering if someone already has the answers...

When connecting to Office 365....

Does Outlook 2010 on Windows 7 support TLS 1.2 by default?

Does Outlook 2013 on Windows 7 support TLS 1.2 by default?

Does Outlook 2016/365 on Windows 7 support TLS 1.2 by default?

Does Skype for Business 365 on Windows 7 support TLS 1.2 by default?

if the answer is no what is the windows 7 upgrade path to support the use of TLS 1.2 in the above applications?

Also...

Exchange Online will support opportunistic TLS with version 1.2 the only supported version.

What is the minimum Exchange and OS version combination to natively (default) support TLS 1.2 for SMTP

e.g. out of the Box Exchange 2010 on Server 2012 R2?

I am planning to put together some comms for our customers still on Windows 7 and will try and put a matrix together from the above information.

Thanks!

[#2 · Accepted solution]

The Exchange team has published guidance on this here: https://blogs.technet.microsoft.com/exchange/2018/01/26/exchange-server-tls-guidance-part-1-getting-...

Office applications on Windows 7 require additional (OS) patch for TLS 1.2 as detailed for example here: https://blogs.technet.microsoft.com/schrimsher/2016/07/08/enabling-tls-1-1-and-1-2-in-outlook-on-win...

[#3]

Thanks Vasil,

i'm just surprised by the below statement considering how many organisations are still on Windows 7 or Exchange 2010 on Server 2008 R2...

https://support.microsoft.com/en-gb/help/4057306/preparing-for-tls-1-2-in-office-365

"Although current analysis of connections to Microsoft Online services shows that most services/endpoints see very little TLS 1.0 and 1.1 usage, we are providing notice of this change so that you can update any affected clients or servers as necessary before support for TLS 1.0 and 1.1 ends. If you are using any on-premises infrastructure for hybrid scenarios or Active Directory Federation Services, make sure that the infrastructure can support both inbound and outbound connections that use TLS 1.2."

[#4]

Also...

IE 8, 9 & 10 will not connect to Office 365 on Windows 7 at all right? i.e. no remediation or patch possible

[#5]

Those products are all out of support now, so I highly doubt we will see any more patches...

[#6]

Hello,

What is it about:
 

- The 1.1.614.0 version of Azure AD Connect defaults to TLS 1.2, however the older versions will still work or we have to enable TLS 1.2 (enable on the system if not and by following this doc: https://docs.microsoft.com/en- us / azure / active-directory / hybrid / how-to-connect-install-prer...) ?

-Applications (others than .NET, for example a Java application on a Linux server) that would use the Microsoft APIs to do actions on Office 365 (assign license, user management, etc.) should they support TLS 1.2 (and also the OS, which is sometimes not at all from Microsoft ..)?

- If all PCs go through a proxy (which is able to TLS 1.2 to Microsoft), do you need to put TLS 1.2 on computers or not?

Thanks