{"id":7285,"date":"2019-03-20T10:35:29","date_gmt":"2019-03-20T14:35:29","guid":{"rendered":"https:\/\/knowlegebase-b5heb6b2esbghgd4.eastus2-01.azurewebsites.net\/?post_type=ht_kb&p=7285"},"modified":"2019-04-02T16:29:13","modified_gmt":"2019-04-02T20:29:13","slug":"how-to-enable-connecting-to-datamotion-over-tls-1-2","status":"publish","type":"ht_kb","link":"https:\/\/knowlegebase-b5heb6b2esbghgd4.eastus2-01.azurewebsites.net\/?ht_kb=how-to-enable-connecting-to-datamotion-over-tls-1-2","title":{"rendered":"How to enable connecting to DataMotion over TLS 1.2"},"content":{"rendered":"

To help DataMotion customers migrate to TLS 1.2 after DataMotion stops supporting TLS 1.0 and 1.1, this article describes how DataMotion customers can enable and test TLS 1.2 connections from their endpoints to DataMotion SecureMail and Direct.<\/p>\n

Browser-based clients accessing DataMotion SecureMail and Direct Web portals<\/h3>\n

To check that your browser supports TLS 1.2, visit https:\/\/www.ssllabs.com\/<\/a> and click on Test your browser. If the result shows that your browser does not support TLS 1.2, please upgrade your browser. Please refer to https:\/\/en.wikipedia.org\/wiki\/Transport_Layer_Security#Web_browsers<\/a> for more specific information on browser versions that support TLS 1.2.<\/p>\n

DataMotion SecureMail Outlook Add-in<\/h3>\n

If you are using the Personal or Corporate version of the Outlook Add-in, please upgrade it to v5.0, available at SecureMail Download Console.<\/p>\n

If you use an unsupported version of Outlook (2007 or below), please upgrade Outlook and DataMotion Add-In to the latest supported versions in order to continue using the Add-in.<\/p>\n

Tagging-only version of the Outlook Add-in is not affected by this change.<\/p>\n

DataMotion REST, SOAP (CMv4) or CMLFT APIs<\/h3>\n

In order to make sure your API client can connect over TLS 1.2, please do the following:<\/p>\n

    \n
  1. Ensure that your code can handle TLS 1.2 connections. For example, the C# code snippet below will enable the use of TLS 1.2 on your requests:
    \nServicePointManager.SecurityProtocol |= SecurityProtocolType.Tls12;<\/strong><\/li>\n
  2. Make sure that your API client uses .NET library v.4.5 or later.<\/li>\n
  3. Enable the SCH_USE_STRONG_CRYPTO flag in the Registry, as described below.<\/li>\n<\/ol>\n

    A value of 1 causes your app to use strong cryptography. If your app targets .NET Framework 4.6 or later versions, this key defaults to a value of 1. If your app runs on .NET Framework 4.6, but targets an earlier version, you should explicitly set its value to 1:<\/p>\n

    For 32 bit systems:<\/h5>\n

    [HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\.NETFramework\\v4.0.30319]
    \n“SystemDefaultTlsVersions”=dword:00000001
    \n“SchUseStrongCrypto”=dword:00000001<\/p>\n

    For 64 bit systems:<\/h5>\n

    [HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\v4.0.30319]
    \n“SystemDefaultTlsVersions”=dword:00000001
    \n“SchUseStrongCrypto”=dword:00000001<\/p>\n

    This can be also accomplished by running a PowerShell script, as follows:<\/p>\n

    Set-ItemProperty -Path ‘HKLM:\\SOFTWARE\\Wow6432Node\\Microsoft\\.NetFramework\\v4.0.30319’ -Name ‘SchUseStrongCrypto’ -Value ‘1’ -Type DWord<\/p>\n

    You can learn more specifics at https:\/\/docs.microsoft.com\/en-us\/dotnet\/framework\/network-programming\/tls#the-sch_use_strong_crypto-flag<\/a><\/p>\n

    DataMotion SecureMail Gateway<\/h3>\n

    If you have a DataMotion SecureMail Gateway installed on your premises, that connects to DataMotion SecureMail platform https:\/\/ssl.datamotion.com<\/a> , please enable the SCH_USE_STRONG_CRYPTO flag in the Registry to ensure that your SecureMail Gateway can connect over SMTP using TLS 1.2:<\/p>\n

    [HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\.NETFramework\\v4.0.30319]
    \n“SystemDefaultTlsVersions”=dword:00000001
    \n“SchUseStrongCrypto”=dword:00000001<\/p>\n

    [HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\v4.0.30319]
    \n“SystemDefaultTlsVersions”=dword:00000001
    \n“SchUseStrongCrypto”=dword:00000001<\/p>\n

    Please restart the system in order for the update to take effect.<\/p>\n

    SMTP\/POP3 clients and other endpoints<\/h3>\n

    If your SMTP or POP3 client (or other endpoint) does not connect over TLS 1.2, please update the Registry as described above in the DataMotion SecureMail Gateway section and restart the system.<\/p>\n

    Testing your endpoints<\/h3>\n

    After making the changes described above, you can test your endpoints by connecting to a test URL, separately provided by DataMotion to all customers who may be affected by this update. Please contact support@datamotion.com<\/a> if you don\u2019t have this info.<\/p>\n

    List of supported ciphers after migration is complete<\/h3>\n

    Upon the completion of migration to TLS 1.2, DataMotion will only support the following ciphers:<\/p>\n

      \n
    • TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P521<\/li>\n
    • TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384<\/li>\n
    • TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256<\/li>\n
    • TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA_P521<\/li>\n
    • TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA_P384<\/li>\n
    • TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA_P256<\/li>\n
    • TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P521<\/li>\n
    • TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P384<\/li>\n
    • TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256<\/li>\n
    • TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA_P521<\/li>\n
    • TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA_P384<\/li>\n
    • TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA_P256<\/li>\n
    • TLS_RSA_WITH_AES_256_GCM_SHA384<\/li>\n
    • TLS_RSA_WITH_AES_128_GCM_SHA256<\/li>\n
    • TLS_RSA_WITH_AES_256_CBC_SHA256<\/li>\n
    • TLS_RSA_WITH_AES_256_CBC_SHA<\/li>\n
    • TLS_RSA_WITH_AES_128_CBC_SHA256<\/li>\n
    • TLS_RSA_WITH_AES_128_CBC_SHA<\/li>\n
    • TLS_RSA_WITH_3DES_EDE_CBC_SHA<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"

      To help DataMotion customers migrate to TLS 1.2 after DataMotion stops supporting TLS 1.0 and 1.1, this article describes how DataMotion customers can enable and test TLS 1.2 connections from their endpoints to DataMotion SecureMail and Direct. Browser-based clients accessing DataMotion SecureMail and Direct Web portals To check that your…<\/p>\n","protected":false},"author":1,"comment_status":"open","ping_status":"closed","template":"","format":"standard","meta":{"content-type":"","footnotes":""},"ht-kb-category":[51],"ht-kb-tag":[],"class_list":["post-7285","ht_kb","type-ht_kb","status-publish","format-standard","hentry","ht_kb_category-email-client-settings"],"_links":{"self":[{"href":"https:\/\/knowlegebase-b5heb6b2esbghgd4.eastus2-01.azurewebsites.net\/index.php?rest_route=\/wp\/v2\/ht-kb\/7285","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/knowlegebase-b5heb6b2esbghgd4.eastus2-01.azurewebsites.net\/index.php?rest_route=\/wp\/v2\/ht-kb"}],"about":[{"href":"https:\/\/knowlegebase-b5heb6b2esbghgd4.eastus2-01.azurewebsites.net\/index.php?rest_route=\/wp\/v2\/types\/ht_kb"}],"author":[{"embeddable":true,"href":"https:\/\/knowlegebase-b5heb6b2esbghgd4.eastus2-01.azurewebsites.net\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/knowlegebase-b5heb6b2esbghgd4.eastus2-01.azurewebsites.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=7285"}],"version-history":[{"count":1,"href":"https:\/\/knowlegebase-b5heb6b2esbghgd4.eastus2-01.azurewebsites.net\/index.php?rest_route=\/wp\/v2\/ht-kb\/7285\/revisions"}],"predecessor-version":[{"id":7286,"href":"https:\/\/knowlegebase-b5heb6b2esbghgd4.eastus2-01.azurewebsites.net\/index.php?rest_route=\/wp\/v2\/ht-kb\/7285\/revisions\/7286"}],"wp:attachment":[{"href":"https:\/\/knowlegebase-b5heb6b2esbghgd4.eastus2-01.azurewebsites.net\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=7285"}],"wp:term":[{"taxonomy":"ht_kb_category","embeddable":true,"href":"https:\/\/knowlegebase-b5heb6b2esbghgd4.eastus2-01.azurewebsites.net\/index.php?rest_route=%2Fwp%2Fv2%2Fht-kb-category&post=7285"},{"taxonomy":"ht_kb_tag","embeddable":true,"href":"https:\/\/knowlegebase-b5heb6b2esbghgd4.eastus2-01.azurewebsites.net\/index.php?rest_route=%2Fwp%2Fv2%2Fht-kb-tag&post=7285"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}