SOLVED

Windows Server 2016 - SMTP Server with TLS 1.2

Copper Contributor

Hello,

We are using a Windows Server 2016 as an internal SMTP relay server to forward messages from local servers and software to our Office365 Exchange environment. Since Microsoft has announced that TLS 1.2 will come in the next months, we are looking for a setting in the Windows based SMTP Server (local IIS) for TLS 1.2. Does anybody know how to setup the windows SMTP server to use the new TLS standard?

Thanks for your answers, Regards, Chris

3 Replies
best response confirmed by Chris2364 (Copper Contributor)
Solution

Hi @Chris2364 

 

My understanding is that for Server 2016, TLS 1.2 is enabled by default

 

https://docs.microsoft.com/en-us/windows/win32/secauthn/protocols-in-tls-ssl--schannel-ssp-

 

clipboard_image_0.png

 

I've used https://www.nartac.com/Products/IISCrypto in the past to confirm/change settings.

 

Hope this helps,

Mark

@HidMov Hi - Isn't the original question how to configure the Microsoft IIS SMTP for TLS 1.2, rather than how to allow it on the server?

 

Thanks,

Eric

Hi @Eric1972 

 

In this instance, my understanding that it is one and the same - TLS1.2 is enabled and configured by default on Server 2016, so no further configuration is unnecessary. This has been my experience and hopefully the smtp relay worked in TLS1.2 for OP, but happy to be corrected if I'm mistaken. 

1 best response

Accepted Solutions
best response confirmed by Chris2364 (Copper Contributor)
Solution

Hi @Chris2364 

 

My understanding is that for Server 2016, TLS 1.2 is enabled by default

 

https://docs.microsoft.com/en-us/windows/win32/secauthn/protocols-in-tls-ssl--schannel-ssp-

 

clipboard_image_0.png

 

I've used https://www.nartac.com/Products/IISCrypto in the past to confirm/change settings.

 

Hope this helps,

Mark

View solution in original post