Add the TLS 1.2 key to Registry (Windows Server 2008 R2)

For WorkZone Process to support TLS 1.2 on Windows Server 2008 R2, you need to:

  • Make sure that the .NET Framework version is 4.7 or higher.
  • Add the TLS key to Registry to enable a Windows Server 20018 R2 to negotiate TLS 1.2.

See also the Microsoft article TLS/SSL Settings.


Change .Net framework version to 4.7

This procedure describes how to change the .NET Framework version to 4.7 on the servers that run WorkZone Process. This change makes the operating system able to negotiate the security protocol with remote servers.

  1. Go to the folder named %ProgramFiles(x86)%\KMD\WorkZone\Process\Web\Services on all servers.
  2. As administrator, open the file named Web.config in a text editor, for example Notepad.
  3. Find the two nodes at the following XPaths:
  4. configuration/system.web/compilation

    configuration/system.web/httpRuntime

  5. Change ther values of their targetFramework attributes from 4.5 to 4.7.
 <?xml version="1.0" encoding="UTF-8"?>
<configuration>
  <configSections>
    <sectionGroup name="applicationSettings" type="System.Configuration.ApplicationSettingsGroup, System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089">
      <section name="Scanjour.Workflow4.Web.Services.Properties.Settings" type="System.Configuration.ClientSettingsSection, System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" requirePermission="false" />
      <section name="Scanjour.Workflow4.Host.Settings" type="System.Configuration.ClientSettingsSection, System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" requirePermission="false" />
    </sectionGroup>
  </configSections>
  <appSettings>
    <add key="aspnet:UseTaskFriendlySynchronizationContext" value="true" />
  </appSettings>
  <!-- Web.http.config from Workflow4.Web.Services-->
  <!-- Enable Fiddler tracing using reverse proxy -->
  <!--<system.net>
  	<defaultProxy>
  		<proxy bypassonlocal="False" usesystemdefault="True" proxyaddress="http://127.0.0.1:8888" />
  	</defaultProxy>
  </system.net>-->
  <system.web>
    <compilation debug="true" targetFramework="4.5" />
    <httpRuntime targetFramework="4.5" />
    <identity impersonate="false" />
  </system.web>
…
</configuration>
  1. Save the changes and close the editor.
  2. From a command prompt having administrator permissions, run an IISRESET.


Add TLS 1.2 key to Registry

You must execute the procedure for all servers that run WorkZone Process. The procedure shows how to enable a Windows Server 20018 R2 to negotiate TLS 1.2.

You can also run a script that automatically executes the procedure. See Script for adding the TLS key to Registry.

  1. Open the Windows Registry Editor as an administrator.
  2. Open a command prompt as an administrator and run the regedit command.

  3. In the registry, add a TLS 1.2 node to the registry folder at the following path:
  4. HKLM SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols

    where HKLM SYSTEM means HKEY_LOCAL_MACHINE\System.

  5. Below the node that you created in step 2, create an additional node named Client.
  6. Below the Client node, add a new DWORD entry by the name DisabledByDefault, and specify the value 0. This will include TLS 1.2 in the negotiation.
  7. Below the Client node add a new DWORD entry by the name Enabled and specify the value 1. This will enable TLS 1.2 on the client site.
  8. Exit the registry editor.
  9. From a command prompt having administrator permissions, run an IISRESET.

Script for adding the TLS key to Registry

[CmdLetBinding()]
	Param 
    (	
        [parameter(Mandatory = $False)]
        [string] $regitrypath = "HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols"
	)

if(!(Test-Path $regitrypath))
{
    Write-Warning "The registry path ($($regitrypath)) does not exist"
}
else
{
    $folderpath = "TLS 1.2\Client"
    $fullpath = Join-Path -Path $regitrypath -ChildPath $folderpath
    if(!(Test-Path $fullpath))
    {
        Set-Location $regitrypath
        New-Item -Path $folderpath -Force | Out-Null
    }
    
    New-ItemProperty -Path $fullpath -Name "DisabledByDefault" -Value "0" -PropertyType DWORD -Force | Out-Null
    New-ItemProperty -Path $fullpath -Name "Enabled" -Value "1" -PropertyType DWORD -Force | Out-Null
}





# SIG # Begin signature block
# MIIX8wYJKoZIhvcNAQcCoIIX5DCCF+ACAQExDzANBglghkgBZQMEAgEFADB5Bgor
# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG
# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCAzuixBH23nUd6p
# 6hMoejg+WS7EOjFmdICZp/a3I1sEA6CCEvQwggPuMIIDV6ADAgECAhB+k+v7fMZO
# WepLmnfUBvw7MA0GCSqGSIb3DQEBBQUAMIGLMQswCQYDVQQGEwJaQTEVMBMGA1UE
# CBMMV2VzdGVybiBDYXBlMRQwEgYDVQQHEwtEdXJiYW52aWxsZTEPMA0GA1UEChMG
# VGhhd3RlMR0wGwYDVQQLExRUaGF3dGUgQ2VydGlmaWNhdGlvbjEfMB0GA1UEAxMW
# VGhhd3RlIFRpbWVzdGFtcGluZyBDQTAeFw0xMjEyMjEwMDAwMDBaFw0yMDEyMzAy
# MzU5NTlaMF4xCzAJBgNVBAYTAlVTMR0wGwYDVQQKExRTeW1hbnRlYyBDb3Jwb3Jh
# dGlvbjEwMC4GA1UEAxMnU3ltYW50ZWMgVGltZSBTdGFtcGluZyBTZXJ2aWNlcyBD
# QSAtIEcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsayzSVRLlxwS
# CtgleZEiVypv3LgmxENza8K/LlBa+xTCdo5DASVDtKHiRfTot3vDdMwi17SUAAL3
# Te2/tLdEJGvNX0U70UTOQxJzF4KLabQry5kerHIbJk1xH7Ex3ftRYQJTpqr1SSwF
# eEWlL4nO55nn/oziVz89xpLcSvh7M+R5CvvwdYhBnP/FA1GZqtdsn5Nph2Upg4XC
# YBTEyMk7FNrAgfAfDXTekiKryvf7dHwn5vdKG3+nw54trorqpuaqJxZ9YfeYcRG8
# 4lChS+Vd+uUOpyyfqmUg09iW6Mh8pU5IRP8Z4kQHkgvXaISAXWp4ZEXNYEZ+VMET
# fMV58cnBcQIDAQABo4H6MIH3MB0GA1UdDgQWBBRfmvVuXMzMdJrU3X3vP9vsTIAu
# 3TAyBggrBgEFBQcBAQQmMCQwIgYIKwYBBQUHMAGGFmh0dHA6Ly9vY3NwLnRoYXd0
# ZS5jb20wEgYDVR0TAQH/BAgwBgEB/wIBADA/BgNVHR8EODA2MDSgMqAwhi5odHRw
# Oi8vY3JsLnRoYXd0ZS5jb20vVGhhd3RlVGltZXN0YW1waW5nQ0EuY3JsMBMGA1Ud
# JQQMMAoGCCsGAQUFBwMIMA4GA1UdDwEB/wQEAwIBBjAoBgNVHREEITAfpB0wGzEZ
# MBcGA1UEAxMQVGltZVN0YW1wLTIwNDgtMTANBgkqhkiG9w0BAQUFAAOBgQADCZuP
# ee9/WTCq72i1+uMJHbtPggZdN1+mUp8WjeockglEbvVt61h8MOj5aY0jcwsSb0ep
# rjkR+Cqxm7Aaw47rWZYArc4MTbLQMaYIXCp6/OJ6HVdMqGUY6XlAYiWWbsfHN2qD
# IQiOQerd2Vc/HXdJhyoWBl6mOGoiEqNRGYN+tjCCBKMwggOLoAMCAQICEA7P9DjI
# /r81bgTYapgbGlAwDQYJKoZIhvcNAQEFBQAwXjELMAkGA1UEBhMCVVMxHTAbBgNV
# BAoTFFN5bWFudGVjIENvcnBvcmF0aW9uMTAwLgYDVQQDEydTeW1hbnRlYyBUaW1l
# IFN0YW1waW5nIFNlcnZpY2VzIENBIC0gRzIwHhcNMTIxMDE4MDAwMDAwWhcNMjAx
# MjI5MjM1OTU5WjBiMQswCQYDVQQGEwJVUzEdMBsGA1UEChMUU3ltYW50ZWMgQ29y
# cG9yYXRpb24xNDAyBgNVBAMTK1N5bWFudGVjIFRpbWUgU3RhbXBpbmcgU2Vydmlj
# ZXMgU2lnbmVyIC0gRzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi
# Yws5RLi7I6dESbsO/6HwYQpTk7CY260sD0rFbv+GPFNVDxXOBD8r/amWltm+YXkL
# W8lMhnbl4ENLIpXuwitDwZ/YaLSOQE/uhTi5EcUj8mRY8BUyb05Xoa6IpALXKh7N
# S+HdY9UXiTJbsF6ZWqidKFAOF+6W22E7RVEdzxJWC5JH/Kuu9mY9R6xwcueS51/N
# ELnEg2SUGb0lgOHo0iKl0LoCeqF3k1tlw+4XdLxBhircCEyMkoyRLZ53RB9o1qh0
# d9sOWzKLVoszvdljyEmdOsXF6jML0vGjG/SLvtmzV4s73gSneiKyJK4ux3DFvk6D
# Jgj7C72pT5kI4RAocqrNAgMBAAGjggFXMIIBUzAMBgNVHRMBAf8EAjAAMBYGA1Ud
# JQEB/wQMMAoGCCsGAQUFBwMIMA4GA1UdDwEB/wQEAwIHgDBzBggrBgEFBQcBAQRn
# MGUwKgYIKwYBBQUHMAGGHmh0dHA6Ly90cy1vY3NwLndzLnN5bWFudGVjLmNvbTA3
# BggrBgEFBQcwAoYraHR0cDovL3RzLWFpYS53cy5zeW1hbnRlYy5jb20vdHNzLWNh
# LWcyLmNlcjA8BgNVHR8ENTAzMDGgL6AthitodHRwOi8vdHMtY3JsLndzLnN5bWFu
# dGVjLmNvbS90c3MtY2EtZzIuY3JsMCgGA1UdEQQhMB+kHTAbMRkwFwYDVQQDExBU
# aW1lU3RhbXAtMjA0OC0yMB0GA1UdDgQWBBRGxmmjDkoUHtVM2lJjFz9eNrwN5jAf
# BgNVHSMEGDAWgBRfmvVuXMzMdJrU3X3vP9vsTIAu3TANBgkqhkiG9w0BAQUFAAOC
# AQEAeDu0kSoATPCPYjA3eKOEJwdvGLLeJdyg1JQDqoZOJZ+aQAMc3c7jecshaAba
# tjK0bb/0LCZjM+RJZG0N5sNnDvcFpDVsfIkWxumy37Lp3SDGcQ/NlXTctlzevTcf
# Q3jmeLXNKAQgo6rxS8SIKZEOgNER/N1cdm5PXg5FRkFuDbDqOJqxOtoJcRD8HHm0
# gHusafT9nLYMFivxf1sJPZtb4hbKE4FtAC44DagpjyzhsvRaqQGvFZwsL0kb2yK7
# w/54lFHDhrGCiF3wPbRRoXkzKy57udwgCRNx62oZW8/opTBXLIlJP7nPf8m/PiJo
# Y1OavWl0rMUdPH+S4MO8HNgEdTCCBPowggPioAMCAQICECosGt9a2i8BRI6xcprE
# e2IwDQYJKoZIhvcNAQELBQAwfzELMAkGA1UEBhMCVVMxHTAbBgNVBAoTFFN5bWFu
# dGVjIENvcnBvcmF0aW9uMR8wHQYDVQQLExZTeW1hbnRlYyBUcnVzdCBOZXR3b3Jr
# MTAwLgYDVQQDEydTeW1hbnRlYyBDbGFzcyAzIFNIQTI1NiBDb2RlIFNpZ25pbmcg
# Q0EwHhcNMTUxMTI0MDAwMDAwWhcNMTkwMjIxMjM1OTU5WjCBgDELMAkGA1UEBhMC
# REsxEDAOBgNVBAgMB0Rlbm1hcmsxETAPBgNVBAcMCEJhbGxlcnVwMRAwDgYDVQQK
# DAdLTUQgQS9TMSgwJgYDVQQLDB9JbmRlbnRpdHkgYW5kIEFjY2VzcyBNYW5hZ2Vt
# ZW50MRAwDgYDVQQDDAdLTUQgQS9TMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
# CgKCAQEAsgRBUFZONlHWmOzsHOjxYfNEGadTueN21GKzUrfpK2ndwalttZC+PHrc
# TS/QQz2cPTxR8+hJXZ9MwoQQeBxcsiQm8Tsfh5t4iM5ZfpUeNO6MtRyREB34Sxp3
# FVwgbH7MxXU7q8tqQTtHF9ED4ArGJ5fDYPaRdu1rWmIvqKy7LlrK5E9rQUidRwbF
# fkqdFLbwPLrSdVuJfhHdN81JVdh+yK0xhDOzuKnrmiHSDYlaew4dIDixBSlPtlLP
# 27YLcsMESHQ1FW2rEVPztFru07kifmtFAY+UZZq8LkIJ6w9KSZvCXsd4kYn/kthY
# vsrCGNAye0Ru6uFylEJoRTP5qDKJpQIDAQABo4IBbjCCAWowCQYDVR0TBAIwADAO
# BgNVHQ8BAf8EBAMCB4AwEwYDVR0lBAwwCgYIKwYBBQUHAwMwZgYDVR0gBF8wXTBb
# BgtghkgBhvhFAQcXAzBMMCMGCCsGAQUFBwIBFhdodHRwczovL2Quc3ltY2IuY29t
# L2NwczAlBggrBgEFBQcCAjAZGhdodHRwczovL2Quc3ltY2IuY29tL3JwYTAfBgNV
# HSMEGDAWgBSWO1PweTOXr32D7y4rzMq3hh5yZjArBgNVHR8EJDAiMCCgHqAchhpo
# dHRwOi8vc3Yuc3ltY2IuY29tL3N2LmNybDBXBggrBgEFBQcBAQRLMEkwHwYIKwYB
# BQUHMAGGE2h0dHA6Ly9zdi5zeW1jZC5jb20wJgYIKwYBBQUHMAKGGmh0dHA6Ly9z
# di5zeW1jYi5jb20vc3YuY3J0MBEGCWCGSAGG+EIBAQQEAwIEEDAWBgorBgEEAYI3
# AgEbBAgwBgEBAAEB/zANBgkqhkiG9w0BAQsFAAOCAQEANkb2mS7my0HnBH4JqZeJ
# ZOOWzp5Cg3bft9ZW2mCEy6SGW3CBzDTvNopp4UV5cBpHJhWADOIndu1iPZ/dPhYw
# bE8nYnC4bcNRqEKZZ6JmZar+GQHnLUGvf4wL5f4jeWeXrTTe7WpM7EwJNSwz/gRa
# RxclhCufPEemdBKVxaoPC+4xwFKOBSkJIOKmcZfzLA8IHfV7Fd0224qGKUk3EbXd
# NL9WwTkiz/JFQiYk+eit8UcQ/hhUpyKM2PauB2aGHXXkMR/xQse9YGA5IY03Wb79
# IJG8ibU+yRdDyoBJI448EFG4aL8TJPcpBXX9JZJ/mJUzzacld6ARMAHLWdW9/oSJ
# CDCCBVkwggRBoAMCAQICED141/l2SWCyYX308B7KhiowDQYJKoZIhvcNAQELBQAw
# gcoxCzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5WZXJpU2lnbiwgSW5jLjEfMB0GA1UE
# CxMWVmVyaVNpZ24gVHJ1c3QgTmV0d29yazE6MDgGA1UECxMxKGMpIDIwMDYgVmVy
# aVNpZ24sIEluYy4gLSBGb3IgYXV0aG9yaXplZCB1c2Ugb25seTFFMEMGA1UEAxM8
# VmVyaVNpZ24gQ2xhc3MgMyBQdWJsaWMgUHJpbWFyeSBDZXJ0aWZpY2F0aW9uIEF1
# dGhvcml0eSAtIEc1MB4XDTEzMTIxMDAwMDAwMFoXDTIzMTIwOTIzNTk1OVowfzEL
# MAkGA1UEBhMCVVMxHTAbBgNVBAoTFFN5bWFudGVjIENvcnBvcmF0aW9uMR8wHQYD
# VQQLExZTeW1hbnRlYyBUcnVzdCBOZXR3b3JrMTAwLgYDVQQDEydTeW1hbnRlYyBD
# bGFzcyAzIFNIQTI1NiBDb2RlIFNpZ25pbmcgQ0EwggEiMA0GCSqGSIb3DQEBAQUA
# A4IBDwAwggEKAoIBAQCXgx4AFq8ssdIIxNdok1FgHnH24ke021hNI2JqtL9aG1H3
# ow0Yd2i72DarLyFQ2p7z518nTgvCl8gJcJOp2lwNTqQNkaC07BTOkXJULs6j20Tp
# Uhs/QTzKSuSqwOg5q1PMIdDMz3+b5sLMWGqCFe49Ns8cxZcHJI7xe74xLT1u3LWZ
# Qp9LYZVfHHDuF33bi+VhiXjHaBuvEXgamK7EVUdT2bMy1qEORkDFl5KK0VOnmVuF
# NVfT6pNiYSAKxzB3JBFNYoO2untogjHuZcrf+dWNsjXcjCtvanJcYISc8gyUXsBW
# UgBIzNP4pX3eL9cT5DiohNVGuBOGwhud6lo43ZvbAgMBAAGjggGDMIIBfzAvBggr
# BgEFBQcBAQQjMCEwHwYIKwYBBQUHMAGGE2h0dHA6Ly9zMi5zeW1jYi5jb20wEgYD
# VR0TAQH/BAgwBgEB/wIBADBsBgNVHSAEZTBjMGEGC2CGSAGG+EUBBxcDMFIwJgYI
# KwYBBQUHAgEWGmh0dHA6Ly93d3cuc3ltYXV0aC5jb20vY3BzMCgGCCsGAQUFBwIC
# MBwaGmh0dHA6Ly93d3cuc3ltYXV0aC5jb20vcnBhMDAGA1UdHwQpMCcwJaAjoCGG
# H2h0dHA6Ly9zMS5zeW1jYi5jb20vcGNhMy1nNS5jcmwwHQYDVR0lBBYwFAYIKwYB
# BQUHAwIGCCsGAQUFBwMDMA4GA1UdDwEB/wQEAwIBBjApBgNVHREEIjAgpB4wHDEa
# MBgGA1UEAxMRU3ltYW50ZWNQS0ktMS01NjcwHQYDVR0OBBYEFJY7U/B5M5evfYPv
# LivMyreGHnJmMB8GA1UdIwQYMBaAFH/TZafC3ey78DAJ80M5+gKvMzEzMA0GCSqG
# SIb3DQEBCwUAA4IBAQAThRoeaak396C9pK9+HWFT/p2MXgymdR54FyPd/ewaA1U5
# +3GVx2Vap44w0kRaYdtwb9ohBcIuc7pJ8dGT/l3JzV4D4ImeP3Qe1/c4i6nWz7s1
# LzNYqJJW0chNO4LmeYQW/CiwsUfzHaI+7ofZpn+kVqU/rYQuKd58vKiqoz0EAeq6
# k6IOUCIpF0yH5DoRX9akJYmbBWsvtMkBTCd7C6wZBSKgYBU/2sn7TUyP+3Jnd/0n
# lMe6NQ6ISf6N/SivShK9DbOXBd5EDBX6NisD3MFQAfGhEV0U5eK9J0tUviuEXg+m
# w3QFCu+Xw4kisR93873NQ9TxTKk/tYuEr2Ty0BQhMYIEVTCCBFECAQEwgZMwfzEL
# MAkGA1UEBhMCVVMxHTAbBgNVBAoTFFN5bWFudGVjIENvcnBvcmF0aW9uMR8wHQYD
# VQQLExZTeW1hbnRlYyBUcnVzdCBOZXR3b3JrMTAwLgYDVQQDEydTeW1hbnRlYyBD
# bGFzcyAzIFNIQTI1NiBDb2RlIFNpZ25pbmcgQ0ECECosGt9a2i8BRI6xcprEe2Iw
# DQYJYIZIAWUDBAIBBQCggYQwGAYKKwYBBAGCNwIBDDEKMAigAoAAoQKAADAZBgkq
# hkiG9w0BCQMxDAYKKwYBBAGCNwIBBDAcBgorBgEEAYI3AgELMQ4wDAYKKwYBBAGC
# NwIBFTAvBgkqhkiG9w0BCQQxIgQgBuO9BF3DQJ9F40qrVRPjouKcDgu7D75w3c84
# P3urgAQwDQYJKoZIhvcNAQEBBQAEggEAL3+7b4YyU9zIHT63pnCtLTn0HCEZLYMG
# hf7rIspJ1bH1FfmMy1HycMYACgerUwcVHXALJmI0LUaHc0Jclu8cnUM3qUSa4mFY
# V9/bJ3l0NpgVrjFMGRQC6aPNxDRKL0LB4scNvPUdUWnMorvTDdPinMwv4h9PVa5d
# s1Khguu31xMdnrQYFsynyI/X3dbEWoUyVhQfV0JfbdDaCxh07fHMsreggv7B1Uq7
# 1JrqJTFTFrUOLFJ+psPnYSqlgs0wBZlprktdotTr7Uk5CPzfFKCq5By9qOy850lY
# rD15JkSybjUmLtpxpHtKU3QKlHSJJAl2XWOP5A+kcP0JiSziRH1S2qGCAgswggIH
# BgkqhkiG9w0BCQYxggH4MIIB9AIBATByMF4xCzAJBgNVBAYTAlVTMR0wGwYDVQQK
# ExRTeW1hbnRlYyBDb3Jwb3JhdGlvbjEwMC4GA1UEAxMnU3ltYW50ZWMgVGltZSBT
# dGFtcGluZyBTZXJ2aWNlcyBDQSAtIEcyAhAOz/Q4yP6/NW4E2GqYGxpQMAkGBSsO
# AwIaBQCgXTAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEP
# Fw0xODExMDcwOTE1MzBaMCMGCSqGSIb3DQEJBDEWBBQ1pPslOB1ayBGbHbzPAIU/
# Z4R3LzANBgkqhkiG9w0BAQEFAASCAQBQr6j6MU+SOk8R0NNM7U2bXFEus/+j6NhI
# 1ICjrF4w0i893nktu9OiubZHP4lDqjo4FJ6p4MLQ/71mEzpu4IX8RNdGW0pC/hi5
# quShoHcak4HAv4lrQDUUZzQjUbvHkahO2guca+AKGKZFMi78n0jt8S0ne82X3VU1
# LIGHSY9dZIM6YM0AcFS4i0U503YqS5hLb//Jqkhm02bQy96nyW8dJieBHMJH3Umi
# o1SFzx5E4MwwKpCuTJYkVZ5vE6Hc4oZA1akjBHMs28lt9V9Rni+zdq8HbrkOKrQZ
# 4EdJMdCsY7g+JSDC3Kr6hFsw63Qa+xUcRYHOpyz0dSrfIHner301
# SIG # End signature block