Key takeaways:
- Microsoft is phasing out TLS 1.0 and 1.1 protocols, enhancing security on future Windows operating systems, with the changes beginning in Windows 11 Insider Preview Builds in September 2023.
- While this change won’t affect Windows 11 Home users, enterprise customers need to prepare, as some applications like SQL Server 2016 and SQL Server 2012 may be impacted.
- Microsoft’s move to disable older TLS protocols represents a proactive step toward bolstering cybersecurity, as these outdated encryption protocols are susceptible to vulnerabilities.
Microsoft is set to bids farewell to outdated Transport Layer Security (TLS) 1.0 and 1.1 protocols in Windows. The company plans to drop support for the encryption protocols starting with Windows 11 Insider Preview Builds in September.
Transport Layer Security (TLS) is a cryptographic protocol that ensures secure data transmission over a computer network. It encrypts data for confidentiality, ensures data integrity to detect tempering, and provides authentication to confirm server identity. TLS relies on digital certificates issued by trusted Certificate Authorities, and it’s widely used to secure web traffic, VPN connections, email communication, and more.
“This change applies only to future new Windows operating systems, both client and server editions. Windows versions that have already been released will not be affected by this change. Windows 11 Insider Preview builds starting in September 2023 will have TLS versions 1.0 and 1.1 disabled by default. There is an option to re-enable TLS 1.0 or TLS 1.1 for users who need to maintain compatibility,” Microsoft explained.
Which Windows apps would be affected by TLS 1.0 and TLS 1.1 disablement?
Microsoft confirmed that this change won’t impact Windows 11 Home users, and it would only impact enterprise customers. Microsoft has published a list of apps that could be broken by disabling support for TLS 1.0 and TLS 1.1 on Windows. The list includes SQL Server 2016, SQL Server 2012, Safari version 5.1.7, and much more.
Microsoft recommends enterprise admins to run tests and check if all their applications behave as intended. These applications will be automatically disabled and will be tagged using Event 36871 in the Windows Event Log. Microsoft will let IT admins re-enable older versions through Windows Registry, though it’s not recommended.