{"id":4929,"date":"2023-03-28T22:25:00","date_gmt":"2023-03-29T03:25:00","guid":{"rendered":"https:\/\/www.incredigeek.com\/home\/?p=4929"},"modified":"2023-03-28T21:42:42","modified_gmt":"2023-03-29T02:42:42","slug":"enable-tls-1-1-and-1-2-on-windows-7","status":"publish","type":"post","link":"https:\/\/www.incredigeek.com\/home\/enable-tls-1-1-and-1-2-on-windows-7\/","title":{"rendered":"Enable TLS 1.1 and 1.2 on Windows 7"},"content":{"rendered":"\n<p><\/p>\n\n\n\n<p>Windows 7 does not support TLS 1.1 or 1.2 by default.  This can be an issue if you are still trying to use Outlook 2010 on Windows 7.<\/p>\n\n\n\n<p>Fortunately there is a way that we can enable TLS 1.1 and 1.2.<\/p>\n\n\n\n<p>First we need to verify that we have the correct Windows update in place.  Download the appropriate download and double click it to run.<\/p>\n\n\n\n<p>For 64 bit systems download the update from here<\/p>\n\n\n\n<p><a href=\"http:\/\/download.windowsupdate.com\/c\/msdownload\/update\/software\/updt\/2016\/04\/windows6.1-kb3140245-x64_5b067ffb69a94a6e5f9da89ce88c658e52a0dec0.msu\">http:\/\/download.windowsupdate.com\/c\/msdownload\/update\/software\/updt\/2016\/04\/windows6.1-kb3140245-x64_5b067ffb69a94a6e5f9da89ce88c658e52a0dec0.msu<\/a><\/p>\n\n\n\n<p>or for 32 bit systems<\/p>\n\n\n\n<p><a href=\"http:\/\/download.windowsupdate.com\/c\/msdownload\/update\/software\/updt\/2016\/04\/windows6.1-kb3140245-x86_cdafb409afbe28db07e2254f40047774a0654f18.msu\">http:\/\/download.windowsupdate.com\/c\/msdownload\/update\/software\/updt\/2016\/04\/windows6.1-kb3140245-x86_cdafb409afbe28db07e2254f40047774a0654f18.msu<\/a><\/p>\n\n\n\n<p><\/p>\n\n\n\n<p>After the update is finished, create a new text file (AKA PowerShell Script) with the following contents.<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">$arch=(Get-WmiObject -Class Win32_operatingsystem).Osarchitecture\n$reg32bWinHttp = \"HKLM:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\WinHttp\"\n$reg64bWinHttp = \"HKLM:\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\WinHttp\"\n$regWinHttpDefault = \"DefaultSecureProtocols\"\n$regWinHttpValue = \"0x00000a00\"\n$regTLS11 = \"HKLM:\\SYSTEM\\CurrentControlSet\\Control\\SecurityProviders\\SCHANNEL\\Protocols\\TLS 1.1\\Client\"\n$regTLS12 = \"HKLM:SYSTEM\\CurrentControlSet\\Control\\SecurityProviders\\SCHANNEL\\Protocols\\TLS 1.2\\Client\"\n$regTLSDefault = \"DisabledByDefault\"\n$regTLSValue = \"0x00000000\"\n\nClear-Host\nWrite-Output \"Creating Registry Keys...`n\"\nWrite-Output \"Creating registry key $reg32bWinHttp\\$regWinHttpDefault with value $regWinHttpValue\"\n\nIF(!(Test-Path $reg32bWinHttp)) {\n    New-Item -Path $reg32bWinHttp -Force | Out-Null\n    New-ItemProperty -Path $reg32bWinHttp -Name $regWinHttpDefault -Value $regWinHttpValue -PropertyType DWORD -Force | Out-Null\n}\nELSE {\n    New-ItemProperty -Path $reg32bWinHttp -Name $regWinHttpDefault -Value $regWinHttpValue -PropertyType DWORD -Force | Out-Null\n}\n\nIF($arch -eq \"64-bit\") {\n    Write-Output \"Creating registry key $reg64bWinHttp\\$regWinHttpDefault with value $regWinHttpValue\"\n    IF(!(Test-Path $reg64bWinHttp)) {\n        New-Item -Path $reg64bWinHttp -Force | Out-Null\n        New-ItemProperty -Path $reg64bWinHttp -Name $regWinHttpDefault -Value $regWinHttpValue -PropertyType DWORD -Force | Out-Null\n    }\n    ELSE {\n        New-ItemProperty -Path $reg64bWinHttp -Name $regWinHttpDefault -Value $regWinHttpValue -PropertyType DWORD -Force | Out-Null\n    }\n}\n\nWrite-Output \"Creating registry key $regTLS11\\$regTLSDefault with value $regTLSValue\"\n\nIF(!(Test-Path $regTLS11)) {\n    New-Item -Path $regTLS11 -Force | Out-Null\n    New-ItemProperty -Path $regTLS11 -Name $regTLSDefault -Value $regTLSValue -PropertyType DWORD -Force | Out-Null\n    }\nELSE {\n    New-ItemProperty -Path $regTLS11 -Name $regTLSDefault -Value $regTLSValue -PropertyType DWORD -Force | Out-Null\n}\n\nWrite-Output \"Creating registry key $regTLS12\\$regTLSDefault with value $regTLSValue\"\n\nIF(!(Test-Path $regTLS12)) {\n    New-Item -Path $regTLS12 -Force | Out-Null\n    New-ItemProperty -Path $regTLS12 -Name $regTLSDefault -Value $regTLSValue -PropertyType DWORD -Force | Out-Null\n    }\nELSE {\n    New-ItemProperty -Path $regTLS12 -Name $regTLSDefault -Value $regTLSValue -PropertyType DWORD -Force | Out-Null\n}\n\nWrite-Output \"`nComplete!\"<\/pre>\n\n\n\n<p>Save the file as &#8220;tls-reg-edit.ps1&#8221;<\/p>\n\n\n\n<p><em>If saving it using notepad, change Save as type: All files (*.*)<\/em> <\/p>\n\n\n\n<p>Open a PowerShell.  Change directories &#8220;cd&#8221; to the location you saved the above script to. ie. cd Downloads<\/p>\n\n\n\n<p>Run the script with the follow command.  Note you will most likely need to hit Y to allow the scripts to run.<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">Set-ExecutionPolicy Bypass -Scope Process ; .\\tls-reg-edit.ps1<\/pre>\n\n\n\n<p>After the script runs, you&#8217;ll need to reboot your computer.<\/p>\n\n\n\n<p><\/p>\n\n\n\n<p>The script and information was taken from the following link.  Thanks cPanel!<\/p>\n\n\n\n<p><a href=\"https:\/\/docs.cpanel.net\/knowledge-base\/security\/how-to-configure-microsoft-windows-7-to-use-tls-version-1.2\/\">https:\/\/docs.cpanel.net\/knowledge-base\/security\/how-to-configure-microsoft-windows-7-to-use-tls-version-1.2\/<\/a> <\/p>\n\n\n\n<p>There is also more information at the following Microsoft link.<\/p>\n\n\n\n<p><a href=\"https:\/\/support.microsoft.com\/en-us\/topic\/update-to-enable-tls-1-1-and-tls-1-2-as-default-secure-protocols-in-winhttp-in-windows-c4bd73d2-31d7-761e-0178-11268bb10392\">https:\/\/support.microsoft.com\/en-us\/topic\/update-to-enable-tls-1-1-and-tls-1-2-as-default-secure-protocols-in-winhttp-in-windows-c4bd73d2-31d7-761e-0178-11268bb10392<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Windows 7 does not support TLS 1.1 or 1.2 by default. This can be an issue if you are still trying to use Outlook 2010 on Windows 7. Fortunately there is a way that we can enable TLS 1.1 and &hellip; <a href=\"https:\/\/www.incredigeek.com\/home\/enable-tls-1-1-and-1-2-on-windows-7\/\">Continue reading <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[9],"tags":[223,1004,1432,887,1431,273,311],"class_list":["post-4929","post","type-post","status-publish","format-standard","hentry","category-windows","tag-email","tag-outlook","tag-outlook-2010","tag-tls","tag-tls-1-1","tag-windows","tag-windows-7"],"_links":{"self":[{"href":"https:\/\/www.incredigeek.com\/home\/wp-json\/wp\/v2\/posts\/4929","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.incredigeek.com\/home\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.incredigeek.com\/home\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.incredigeek.com\/home\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.incredigeek.com\/home\/wp-json\/wp\/v2\/comments?post=4929"}],"version-history":[{"count":1,"href":"https:\/\/www.incredigeek.com\/home\/wp-json\/wp\/v2\/posts\/4929\/revisions"}],"predecessor-version":[{"id":4931,"href":"https:\/\/www.incredigeek.com\/home\/wp-json\/wp\/v2\/posts\/4929\/revisions\/4931"}],"wp:attachment":[{"href":"https:\/\/www.incredigeek.com\/home\/wp-json\/wp\/v2\/media?parent=4929"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.incredigeek.com\/home\/wp-json\/wp\/v2\/categories?post=4929"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.incredigeek.com\/home\/wp-json\/wp\/v2\/tags?post=4929"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}