Office distance, MSSQL and TLS 1.0 and RC4 encryption algorithms

Currently, SSL Labs suggests that SSL RC4 encryption algorithms are low, and that to always mitigate the attack of the BEAST in older clients, TLS 1.0 can be disabled.

I've read the threads which set out that MS SQL server had problems when SSL 3.0 and TLS 1.0 have been disabled, and also this turning off TLS 1.0 would break Remote Desktop (which this thread seems State requires TLS 1.0 and RC4 ciphers: https://msdn.microsoft.com/en-us/library/aa383015%28v=vs.85%29.aspx)

See also:

  • https://TechNet.Microsoft.com/en-us/magazine/ff458357.aspx and
  • https://social.technet.Microsoft.com/forums/en-us/e2b22dad-bb0c-4059-BEEC-6673783ab777/remote-desktop-stopped-working-after-disabling-SSL-20-and-TLS-10

Is it possible to have a Windows Server 2012, which is fully patched, rely on a plu TLS encryption algorithm versions than 1.0 and the MCG (or other)?

If the answer is that TLS 1.0 and RC4 must be enabled for authentication of network layer, can offer you a better order of practical cipher who would score high enough on ssl labs?

SSL3.0 and TLS 1.0 can be turned off the coast and have always start MS SQL 2012 (not configured to use SSL connections/sql ssl certificate)?

Thanks for any input that you are able to give.

This issue is beyond the scope of this site and must be placed on Technet or MSDN

http://social.technet.Microsoft.com/forums/en-us/home

http://social.msdn.Microsoft.com/forums/en-us/home

Tags: Windows

Similar Questions

  • Disable the protocols and encryption algorithms in VMware View connection server and security

    Hello

    In my recent deployment, I had a customer request to disable some protocols and encryption at the Server VMware View connection and security. I read some articles and found that this has been achieved by editing the locked.properties file. But when we have edited and replaced the file, users could not connect to the virtual desktop, so came back to us backwards and desktop computers worked fine.

    I found a few articles that we don't need to edit the locked.properties file in VMware view Horizon 6. If someone has done this please guide me through. Here are the details of the protocols and encryption algorithms that should be disabled

    Diffie-Hellman key

    Enable SSL v2/V3 and TLS 1.1 and 1.2

    Disable the RC4 encryption algorithm

    Select the secret of transfer (if possible)


    VMware view 6 is the connection to the server and security server.


    Thank you.

    Hello

    I implemented the following steps (from the manual):

    1. update the JCE policy files to take in charge the high-strength Cipher Suites

    You can add some cipher suites of high resistance for greater assurance, but first you must update the local_policy.jar and US_export_policy.jar files to each server instance and the security strategy for JRE 7 see connection to the server. You update these policy files by downloading the files to extend JCE (Java Cryptography) unlimited strength political jurisdiction from the Oracle Java SE download site 7.

    If you include some high-strength cipher suites in the list and you do not replace the policy files, you cannot restart the VMware view Horizon connection to the Server service.

    Policy files are located in the directory C:\Program View\Server\jre\lib\security from VMware.

    For more information on the download of the JCE unlimited strength jurisdiction policy 7 files, see the Oracle Java SE download site: http://www.oracle.com/technetwork/java/javase/downloads/index.html.

    After you update the policy files, you need to create backups of the files. If you upgrade the instance of the view connection server or security server, any changes you have made to these files can be replaced, and you may need to restore the backup files.

    2. the changes that policies of global acceptance with ADSI Edit

    • Start the ADSI utility on your computer see connection to the server.
    • In the console tree, select Connect to
    • In the selection or type a unique name text box or a naming context, type the unique name
      DC, DC = vdi is vmware, DC = int.
    • In the type or select a text field or the server box, select or type localhost: 389 or the name of a fully qualified domain (FQDN) of the server computer to connect to port 389 followed view.

    For example: localhost: 389 or mycomputer.mydomain.com:389

    • Expand the tree of the ADSI Editor, OU = properties, select OU = Global, then select OU = common in the right pane.
    • On the object CN = common, Global = UO, UO = properties, select each attribute that you want to change and enter the new list of security protocols or cipher suites.
      I used the following settings:

    EAP-ServerSSLCipherSuites: \LIST:TLS_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_256_CBC_SHA,TLS_RSA_WITH_AES_256_CBC_SHA256

    EAP-ServerSSLSecureProtocols_ \LIST:TLSv1.1,TLSv1.2

    It is not the highest possible, but they work with all the features of our customers.

    • Restart the service of VMware view Horizon connection server (server connection and security).

    This is not Activate secret transfer (if possible) , but other points are covered.

    If anyone can give a tip to activate the transfer secret, I would be grateful.

  • Microsoft Office Access Runtime and Data Connectivity 2007 Service Pak 2 will not update

    Today, I upgraded my Vista Ultimate Edition of Windows 7 Ultimate and checking the updates it listed 10 important updates. I went back in and there was still the major update 1 "Microsoft Office Access Runtime and Data Connectivity 2007 Service Pak 2 (SP2) who refuses to update which results in an error. I tried several times with the same error that results. Any suggestions as to why?

    The update could not update with no error code, just says 'update failed." However after that restart and check the view of the update the update again must have occurred because it is no longer returns in search of updates.  Thanks for responding to my problem

  • ErrorCode A97 installation: Microsoft® Office Access Runtime and Data Connectivity 2007 Service Pack 2 (SP2)

    How to avoid this update (it retains pupping upwards each time).

    Hello Marcel.Pont,

    Follow the steps below to solve the problem:

    1. Start - Control Panel - programs and features - in the left pane, click View installed updates - uninstall Microsoft Office Access Runtime and Data Connectivity 2007 Service Pack 2 (SP2) update.

    2 restart the computer.

    3. download the updated Microsoft Office Access Runtime and Data Connectivity 2007 Service Pack 2 (SP2) manually from the link below and install it:

    http://www.Microsoft.com/downloads/details.aspx?FamilyId=6F4EDEED-D83F-4C31-AE67-458AE365D420&displaylang=en

    Samantha M S

  • Downloads, but wont install a security update for Office 2003 (KB2760574) and (KB2726929) XP 2003. Install other updates. Error code 0 x 80070643

    Downloads, but wont install a security update for Office 2003 (KB2760574) and (KB2726929) XP 2003. Install other updates. Error code 0 x 80070643

    If you are logged in to your profile, the mark as answer button should be available at the bottom of all messages (except yours).  If this isn't the case, I can have a moderator do it for you, Bill.

  • MS Office 2010 Pro and my printer does not work,

    I just installed MS Office 2010 Pro and my printer does not work, I tried to print a test page for the printer, but that prints either, ask if I want to troubleshoot the printer and when I click on Yes, I get a message that there is a problem of ActiveX.  The printer will not print not any application, but it worked before installing office.
    All the apps work except in order to print it.
    I am running WinXPPro w/sp3.

    Jim K.

    Hello

    1. What is the exact error message?
    2. don't you make changes on the computer before the show?
    3. What is the brand and model of the printer?
    4. this problem occurs with all files that contain the Active X objects or specific file?

    Method 1:
    Run the fix it and check.
    http://support.Microsoft.com/mats/printing_problems/en-us

    Method 2:
    Try the steps in the link and check.
    Printer in Windows problems
    http://Windows.Microsoft.com/en-us/Windows/help/printer-problems-in-Windows

    Method 3:

    This problem occurs if the security settings for the Local computer zone are configured to prevent the ActiveX content to run.

    Important: This section, method, or task contains steps that tell you how to modify the registry. However, serious problems can occur if you modify the registry incorrectly. Therefore, make sure that you proceed with caution. For added protection, back up the registry before you edit it. Then you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click on the number below to view the article in the Microsoft Knowledge Base: http://windows.microsoft.com/en-US/windows-vista/Back-up-the-registry : how to back up and restore the registry in Windows

    a. Click Start and run, type regedit.exe, and then click OK.

    b. expand the following registry subkey:

    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0

    (c) in the right pane, right-click 1200 and then click on edit.

    d. in the value data box, type 0. Then, click OK.

    e. close the registry editor.

  • Never had the CD for my laptop Window XP Pro OS or Pro Office, Visio, project and PP but now I need to reinstall.

    I need to change my phone to a double partioned Window NT (drive C) and Window XP Pro (drive E to a single disk with XP but I have not never have the CD of the operating system XP or Pro Office, Visio, PP and the project.)  I understand I have to format the drive unique and which will be wip on everything, including the data of the user.  How can I get the OS and the App CD "s to proceed?

    See: How to replace Microsoft software

  • I can't drop my icons on the desktop next to the Start button. My 'elements of the locked office' is disabled, and "auto arrange" is unchecked. What can I do so that he abandoned the ions next to the Start button?

    I can't drop my icons on the desktop next to the Start button. My 'elements of the locked office' is disabled, and "auto arrange" is unchecked. What can I do so that he abandoned the ions next to the Start button?

    Hi richardcollis,

    You did changes to the computer before this problem?

    You try to run the system restore that will repair return the computer to the point while it was working fine.

    How to restore Windows XP to a previous state

    Hope the helps of information.

    Please post back and we do know.

  • HP officejet 5740: what is different between the office jet 5740 and the 5742

    My HP 4632 just died 1 month warranty.   Looking for a new printer.  This model still sells... but Amend for the price was a great ptinter.  Looking to buy another printer...

    What is different between the office jet 5740 and the 5742

    Hello Izzy1211dw,

    The difference between these models (and the 5745) are content to include the box according to where you buy, like maybe one of these models can have the USB cable included in the box, which is not the other.  It is a HP reseller application, but in regards to the product specification, they are the same.

    You can see the specifications for each of them in these links:

    Printer support e-all-in-one-HP Officejet 5740

    Printer support e-all-in-one-HP Officejet 5742

    Printer support e-all-in-one-HP Officejet 5745

    I hope that answers your question.

  • Microsoft Office Professional 10 and other programs already installed in my PC running Windows 7 family

    Is that one of my other programs (e.g. Microsoft Office Professional 10) and printer is already installed in my PC running Windows 7 family will be affected with the free update of Windows 10 Home?

    Hey Joan of arc.

    The upgrade to Windows 7 or later will preserve my personal files, applications, and settings?

    Yes, the upgrade to Windows 7 or a later version will preserve your personal files (documents, music, pictures, videos, downloads, Favorites, contacts, etc., applications (IE.) Microsoft Office, Adobe applications etc), games and settings (ie. passwords, dictionary, the application settings).

    However, it is a good practice to back up most important data before the upgrade.

    I hope that helps.do reply back for other queries, would be happy to help you.

  • Why the office buttons, Tablet and phone are switched in the last update?

    Why the office buttons, Tablet and phone are switched in the last update? Are they placed in a different location or have they been deleted all together? I need these options.

    Greg

    I thought about it. They have moved to the Page, and then add another layout.

    Greg

  • We just opened a new office in PAris and we want to give our people a more creative cloud that we already have in our main office. Need buy us a new subscription?

    Hello

    We just opened a new office in Paris and we want to ensure our residents a suite creative cloud a s the one we have in our offices. Must we agree a new?

    Hi Vincent,.

    Yes, you can buy subscriptions.

    You may well want to read on creative cloud for teams, will surely be of great help to you.

    Plans: pricing plans and membershipcreative cloud | Adobe Creative Cloud

    Creative cloud for teams:-https://helpx.adobe.com/creative-cloud/faq/teams.html

    Hope this helps

  • Since I load Acrobat Reader DC, when I try to save the document, word to PDF, the pdf file pages are cut on the width. I use Microsoft Office Word 2007 and I have no problem with the previous version of Adobe Reader. Should what settings I adjust?

    Since I load Acrobat Reader DC, when I try to save the document, word to PDF, the pdf file pages are cut on the width. I use Microsoft Office Word 2007 and I have no problem with the previous version of Adobe Reader. Should what settings I adjust?

    Hi judithl34724699,

    If you want to convert Word files to PDF with the Adobe Reader application then it is possible with the service Pack of PDF. Try to use the service on the web: https://cloud.acrobat.com/convertpdf

    Also try to use a different file type.

    Thank you

    Abhishek

  • I imported a bunch of photos of my Office I retouched and then when I tried to export it didn't export many and is saying that they lack :(

    I imported a bunch of photos of my Office I retouched and then when I tried to export it didn't export many and is saying that they lack

    Hi rochelleh35569723,

    I beg to reconnect please images in Lightroom: Adobe Lightroom - find folders and files moved or missing

    Kind regards

    Tanuj

  • Trying to send a scanned document and I get an error of missing file: api-ms-win-crt-string-11-1.0.dll never had a problem before and I've recently updated to the office of 2016 and that's when I got this message.

    Trying to send a scanned document and I get an error of missing file: api-ms-win-crt-string-11-1.0.dll never had a problem before and I've recently updated to the office of 2016 and that's when I got this message.   Anyone know if it's related to Adobe or Outlook?  I am able to send emails on Outlook.

    Thank you

    Hi lorid74531323,

    Latest version of MS office will not work with your Acrobat 9.

    May be a compatibility issue, please check the web browsers and applications of PDFMaker

    Kind regards
    Nicos

Maybe you are looking for

  • Apple ID with @Gmail login and opening it with icloud account in MAIL

    Hello. I have a problem. I am powered iCloud in my Mac. I registered @icloud.com account alternate e-mail for good work with the Apple ecosystem all. But when I open the MAIL on Mac there try to connect to gmail with apple id password. When I'm tryin

  • Microsoft Word 2010: Can't open Word Document

    Hello. Help me please to fix the word document. While I just changed a document suddenly Word crashed and the document became impossible to open: error during processing messages Any help would be appreciated, Ricky

  • Can I install Windows 7 on 571 ES1 i3 5th generation.

    In the acer driver page, I knew only 10 Windows operating system is given. Does is say that we do not have the drivers for Windows 7 OS or ES1 571 does not support the Windows 7 operating system.

  • AXC - 603 G-UW13 Power DVD

    Hello While doing the update for Power DVD media player that came with my system I accidentally deleted the program! How can I get that back? Thank you. B lueskygal

  • I have ads running in background, no picture, just sound

    Hello, I have Windows Vista Home Premium 32 bit.  Ads are running in the background, just no its image even when the Explorer is closed. Don't know how to fix this?