This is anecdotal; not any kind of documentation on it. But we attempted to enable only TLS 1.1 and TLS 1.2 in the lab. (disable tls 1.0 and ssl3, ssl2 was already disabled for years) For Current Branch console connectivity (1602 at the time of testing, in case someone looks at this email in the future), it worked just fine for us. Keep in mind we were Server12 r2 everywhere (fully patched), and we were at SQL 2014, latest SP, and latest cumulative update, and latest SNAC on any machines hosting the console and the site servers themselves.
With that said... the CONSOLE worked fine. But as you might imagine we have a lot of 3rd party "things" that want to get at our data in the database. Even after walking everyone through getting to the bare minimum versions of odbc drivers (if that's what they were using) or SQL mgmt. studio (if that's what they were using) and the latest SNAC; there were still let me see... 3 different not-under-our-control-at-all external-to-us processes that "need to get our data" and THOSE products didn't yet support TLS 1.1 / TLS 1.2. In 1 case we could leave SSL 3.0 disabled, but had to enable TLS 1.0 For the other 2 cases--we're at the mercy of those external-to-us technologies to get with the program and be able to communicate over something better than SSL 3.0. I think those 2 "ssl 3 only" products are slated for upgrades in "the fall"; so we can retest then. So if that's helpful to you at all... that as long as everything else you might have that wants to get to your database (if you have anything like that) can communicate, you'll be OK. If you're lucky and don't have a dozen things all wanting your data, and the only thing that needs to connect is the console and reporting, then you should be just fine. :) On Wed, Jul 20, 2016 at 3:27 PM, Mote, Todd <[email protected]> wrote: > I know that WSUS supports clients using TLS 1.2, (the console does not, > though there is a work around). Does anybody have any info about SCCM and > TLS 1.2 (and its console)? I couldn’t find very much, if any at all. > > > > Todd > > -- Thank you, Sherry Kissinger My Parameters: Standardize. Simplify. Automate Blogs: http://www.mofmaster.com, http://mnscug.org/blogs/sherry-kissinger, http://www.smguru.org
