Add the TLS 1.2 key to Registry (Windows Server 2008 R2)
For WorkZone Process to support TLS 1.2 on Windows Server 2008 R2, you need to:
- Make sure that the .NET Framework version is 4.7 or higher.
- Add the TLS key to Registry to enable a Windows Server 20018 R2 to negotiate TLS 1.2.
See also the Microsoft article TLS/SSL Settings.
Change .Net framework version to 4.7
This procedure describes how to change the .NET Framework version to 4.7 on the servers that run WorkZone Process. This change makes the operating system able to negotiate the security protocol with remote servers.
- Go to the folder named
%ProgramFiles(x86)%\KMD\WorkZone\Process\Web\Services
on all servers. - As administrator, open the file named Web.config in a text editor, for example Notepad.
- Find the two nodes at the following XPaths:
- Change ther values of their
targetFramework
attributes from 4.5 to 4.7.
configuration/system.web/compilation
configuration/system.web/httpRuntime
<?xml version="1.0" encoding="UTF-8"?>
<configuration>
<configSections>
<sectionGroup name="applicationSettings" type="System.Configuration.ApplicationSettingsGroup, System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089">
<section name="Scanjour.Workflow4.Web.Services.Properties.Settings" type="System.Configuration.ClientSettingsSection, System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" requirePermission="false" />
<section name="Scanjour.Workflow4.Host.Settings" type="System.Configuration.ClientSettingsSection, System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" requirePermission="false" />
</sectionGroup>
</configSections>
<appSettings>
<add key="aspnet:UseTaskFriendlySynchronizationContext" value="true" />
</appSettings>
<!-- Web.http.config from Workflow4.Web.Services-->
<!-- Enable Fiddler tracing using reverse proxy -->
<!--<system.net>
<defaultProxy>
<proxy bypassonlocal="False" usesystemdefault="True" proxyaddress="http://127.0.0.1:8888" />
</defaultProxy>
</system.net>-->
<system.web>
<compilation debug="true" targetFramework="4.5" />
<httpRuntime targetFramework="4.5" />
<identity impersonate="false" />
</system.web>
…
</configuration>
- Save the changes and close the editor.
- From a command prompt having administrator permissions, run an IISRESET.
Add TLS 1.2 key to Registry
You must execute the procedure for all servers that run WorkZone Process. The procedure shows how to enable a Windows Server 20018 R2 to negotiate TLS 1.2.
You can also run a script that automatically executes the procedure. See Script for adding the TLS key to Registry.
- Open the Windows Registry Editor as an administrator.
- In the registry, add a TLS 1.2 node to the registry folder at the following path:
- Below the node that you created in step 2, create an additional node named Client.
- Below the Client node, add a new DWORD entry by the name DisabledByDefault, and specify the value 0. This will include TLS 1.2 in the negotiation.
- Below the Client node add a new DWORD entry by the name Enabled and specify the value 1. This will enable TLS 1.2 on the client site.
- Exit the registry editor.
- From a command prompt having administrator permissions, run an IISRESET.
Open a command prompt as an administrator and run the regedit command.
HKLM SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols
where HKLM SYSTEM
means HKEY_LOCAL_MACHINE\System
.
Script for adding the TLS key to Registry
[CmdLetBinding()]
Param
(
[parameter(Mandatory = $False)]
[string] $regitrypath = "HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols"
)
if(!(Test-Path $regitrypath))
{
Write-Warning "The registry path ($($regitrypath)) does not exist"
}
else
{
$folderpath = "TLS 1.2\Client"
$fullpath = Join-Path -Path $regitrypath -ChildPath $folderpath
if(!(Test-Path $fullpath))
{
Set-Location $regitrypath
New-Item -Path $folderpath -Force | Out-Null
}
New-ItemProperty -Path $fullpath -Name "DisabledByDefault" -Value "0" -PropertyType DWORD -Force | Out-Null
New-ItemProperty -Path $fullpath -Name "Enabled" -Value "1" -PropertyType DWORD -Force | Out-Null
}
# SIG # Begin signature block
# MIIX8wYJKoZIhvcNAQcCoIIX5DCCF+ACAQExDzANBglghkgBZQMEAgEFADB5Bgor
# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG
# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCAzuixBH23nUd6p
# 6hMoejg+WS7EOjFmdICZp/a3I1sEA6CCEvQwggPuMIIDV6ADAgECAhB+k+v7fMZO
# WepLmnfUBvw7MA0GCSqGSIb3DQEBBQUAMIGLMQswCQYDVQQGEwJaQTEVMBMGA1UE
# CBMMV2VzdGVybiBDYXBlMRQwEgYDVQQHEwtEdXJiYW52aWxsZTEPMA0GA1UEChMG
# VGhhd3RlMR0wGwYDVQQLExRUaGF3dGUgQ2VydGlmaWNhdGlvbjEfMB0GA1UEAxMW
# VGhhd3RlIFRpbWVzdGFtcGluZyBDQTAeFw0xMjEyMjEwMDAwMDBaFw0yMDEyMzAy
# MzU5NTlaMF4xCzAJBgNVBAYTAlVTMR0wGwYDVQQKExRTeW1hbnRlYyBDb3Jwb3Jh
# dGlvbjEwMC4GA1UEAxMnU3ltYW50ZWMgVGltZSBTdGFtcGluZyBTZXJ2aWNlcyBD
# QSAtIEcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsayzSVRLlxwS
# CtgleZEiVypv3LgmxENza8K/LlBa+xTCdo5DASVDtKHiRfTot3vDdMwi17SUAAL3
# Te2/tLdEJGvNX0U70UTOQxJzF4KLabQry5kerHIbJk1xH7Ex3ftRYQJTpqr1SSwF
# eEWlL4nO55nn/oziVz89xpLcSvh7M+R5CvvwdYhBnP/FA1GZqtdsn5Nph2Upg4XC
# YBTEyMk7FNrAgfAfDXTekiKryvf7dHwn5vdKG3+nw54trorqpuaqJxZ9YfeYcRG8
# 4lChS+Vd+uUOpyyfqmUg09iW6Mh8pU5IRP8Z4kQHkgvXaISAXWp4ZEXNYEZ+VMET
# fMV58cnBcQIDAQABo4H6MIH3MB0GA1UdDgQWBBRfmvVuXMzMdJrU3X3vP9vsTIAu
# 3TAyBggrBgEFBQcBAQQmMCQwIgYIKwYBBQUHMAGGFmh0dHA6Ly9vY3NwLnRoYXd0
# ZS5jb20wEgYDVR0TAQH/BAgwBgEB/wIBADA/BgNVHR8EODA2MDSgMqAwhi5odHRw
# Oi8vY3JsLnRoYXd0ZS5jb20vVGhhd3RlVGltZXN0YW1waW5nQ0EuY3JsMBMGA1Ud
# JQQMMAoGCCsGAQUFBwMIMA4GA1UdDwEB/wQEAwIBBjAoBgNVHREEITAfpB0wGzEZ
# MBcGA1UEAxMQVGltZVN0YW1wLTIwNDgtMTANBgkqhkiG9w0BAQUFAAOBgQADCZuP
# ee9/WTCq72i1+uMJHbtPggZdN1+mUp8WjeockglEbvVt61h8MOj5aY0jcwsSb0ep
# rjkR+Cqxm7Aaw47rWZYArc4MTbLQMaYIXCp6/OJ6HVdMqGUY6XlAYiWWbsfHN2qD
# IQiOQerd2Vc/HXdJhyoWBl6mOGoiEqNRGYN+tjCCBKMwggOLoAMCAQICEA7P9DjI
# /r81bgTYapgbGlAwDQYJKoZIhvcNAQEFBQAwXjELMAkGA1UEBhMCVVMxHTAbBgNV
# BAoTFFN5bWFudGVjIENvcnBvcmF0aW9uMTAwLgYDVQQDEydTeW1hbnRlYyBUaW1l
# IFN0YW1waW5nIFNlcnZpY2VzIENBIC0gRzIwHhcNMTIxMDE4MDAwMDAwWhcNMjAx
# MjI5MjM1OTU5WjBiMQswCQYDVQQGEwJVUzEdMBsGA1UEChMUU3ltYW50ZWMgQ29y
# cG9yYXRpb24xNDAyBgNVBAMTK1N5bWFudGVjIFRpbWUgU3RhbXBpbmcgU2Vydmlj
# ZXMgU2lnbmVyIC0gRzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi
# Yws5RLi7I6dESbsO/6HwYQpTk7CY260sD0rFbv+GPFNVDxXOBD8r/amWltm+YXkL
# W8lMhnbl4ENLIpXuwitDwZ/YaLSOQE/uhTi5EcUj8mRY8BUyb05Xoa6IpALXKh7N
# S+HdY9UXiTJbsF6ZWqidKFAOF+6W22E7RVEdzxJWC5JH/Kuu9mY9R6xwcueS51/N
# ELnEg2SUGb0lgOHo0iKl0LoCeqF3k1tlw+4XdLxBhircCEyMkoyRLZ53RB9o1qh0
# d9sOWzKLVoszvdljyEmdOsXF6jML0vGjG/SLvtmzV4s73gSneiKyJK4ux3DFvk6D
# Jgj7C72pT5kI4RAocqrNAgMBAAGjggFXMIIBUzAMBgNVHRMBAf8EAjAAMBYGA1Ud
# JQEB/wQMMAoGCCsGAQUFBwMIMA4GA1UdDwEB/wQEAwIHgDBzBggrBgEFBQcBAQRn
# MGUwKgYIKwYBBQUHMAGGHmh0dHA6Ly90cy1vY3NwLndzLnN5bWFudGVjLmNvbTA3
# BggrBgEFBQcwAoYraHR0cDovL3RzLWFpYS53cy5zeW1hbnRlYy5jb20vdHNzLWNh
# LWcyLmNlcjA8BgNVHR8ENTAzMDGgL6AthitodHRwOi8vdHMtY3JsLndzLnN5bWFu
# dGVjLmNvbS90c3MtY2EtZzIuY3JsMCgGA1UdEQQhMB+kHTAbMRkwFwYDVQQDExBU
# aW1lU3RhbXAtMjA0OC0yMB0GA1UdDgQWBBRGxmmjDkoUHtVM2lJjFz9eNrwN5jAf
# BgNVHSMEGDAWgBRfmvVuXMzMdJrU3X3vP9vsTIAu3TANBgkqhkiG9w0BAQUFAAOC
# AQEAeDu0kSoATPCPYjA3eKOEJwdvGLLeJdyg1JQDqoZOJZ+aQAMc3c7jecshaAba
# tjK0bb/0LCZjM+RJZG0N5sNnDvcFpDVsfIkWxumy37Lp3SDGcQ/NlXTctlzevTcf
# Q3jmeLXNKAQgo6rxS8SIKZEOgNER/N1cdm5PXg5FRkFuDbDqOJqxOtoJcRD8HHm0
# gHusafT9nLYMFivxf1sJPZtb4hbKE4FtAC44DagpjyzhsvRaqQGvFZwsL0kb2yK7
# w/54lFHDhrGCiF3wPbRRoXkzKy57udwgCRNx62oZW8/opTBXLIlJP7nPf8m/PiJo
# Y1OavWl0rMUdPH+S4MO8HNgEdTCCBPowggPioAMCAQICECosGt9a2i8BRI6xcprE
# e2IwDQYJKoZIhvcNAQELBQAwfzELMAkGA1UEBhMCVVMxHTAbBgNVBAoTFFN5bWFu
# dGVjIENvcnBvcmF0aW9uMR8wHQYDVQQLExZTeW1hbnRlYyBUcnVzdCBOZXR3b3Jr
# MTAwLgYDVQQDEydTeW1hbnRlYyBDbGFzcyAzIFNIQTI1NiBDb2RlIFNpZ25pbmcg
# Q0EwHhcNMTUxMTI0MDAwMDAwWhcNMTkwMjIxMjM1OTU5WjCBgDELMAkGA1UEBhMC
# REsxEDAOBgNVBAgMB0Rlbm1hcmsxETAPBgNVBAcMCEJhbGxlcnVwMRAwDgYDVQQK
# DAdLTUQgQS9TMSgwJgYDVQQLDB9JbmRlbnRpdHkgYW5kIEFjY2VzcyBNYW5hZ2Vt
# ZW50MRAwDgYDVQQDDAdLTUQgQS9TMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
# CgKCAQEAsgRBUFZONlHWmOzsHOjxYfNEGadTueN21GKzUrfpK2ndwalttZC+PHrc
# TS/QQz2cPTxR8+hJXZ9MwoQQeBxcsiQm8Tsfh5t4iM5ZfpUeNO6MtRyREB34Sxp3
# FVwgbH7MxXU7q8tqQTtHF9ED4ArGJ5fDYPaRdu1rWmIvqKy7LlrK5E9rQUidRwbF
# fkqdFLbwPLrSdVuJfhHdN81JVdh+yK0xhDOzuKnrmiHSDYlaew4dIDixBSlPtlLP
# 27YLcsMESHQ1FW2rEVPztFru07kifmtFAY+UZZq8LkIJ6w9KSZvCXsd4kYn/kthY
# vsrCGNAye0Ru6uFylEJoRTP5qDKJpQIDAQABo4IBbjCCAWowCQYDVR0TBAIwADAO
# BgNVHQ8BAf8EBAMCB4AwEwYDVR0lBAwwCgYIKwYBBQUHAwMwZgYDVR0gBF8wXTBb
# BgtghkgBhvhFAQcXAzBMMCMGCCsGAQUFBwIBFhdodHRwczovL2Quc3ltY2IuY29t
# L2NwczAlBggrBgEFBQcCAjAZGhdodHRwczovL2Quc3ltY2IuY29tL3JwYTAfBgNV
# HSMEGDAWgBSWO1PweTOXr32D7y4rzMq3hh5yZjArBgNVHR8EJDAiMCCgHqAchhpo
# dHRwOi8vc3Yuc3ltY2IuY29tL3N2LmNybDBXBggrBgEFBQcBAQRLMEkwHwYIKwYB
# BQUHMAGGE2h0dHA6Ly9zdi5zeW1jZC5jb20wJgYIKwYBBQUHMAKGGmh0dHA6Ly9z
# di5zeW1jYi5jb20vc3YuY3J0MBEGCWCGSAGG+EIBAQQEAwIEEDAWBgorBgEEAYI3
# AgEbBAgwBgEBAAEB/zANBgkqhkiG9w0BAQsFAAOCAQEANkb2mS7my0HnBH4JqZeJ
# ZOOWzp5Cg3bft9ZW2mCEy6SGW3CBzDTvNopp4UV5cBpHJhWADOIndu1iPZ/dPhYw
# bE8nYnC4bcNRqEKZZ6JmZar+GQHnLUGvf4wL5f4jeWeXrTTe7WpM7EwJNSwz/gRa
# RxclhCufPEemdBKVxaoPC+4xwFKOBSkJIOKmcZfzLA8IHfV7Fd0224qGKUk3EbXd
# NL9WwTkiz/JFQiYk+eit8UcQ/hhUpyKM2PauB2aGHXXkMR/xQse9YGA5IY03Wb79
# IJG8ibU+yRdDyoBJI448EFG4aL8TJPcpBXX9JZJ/mJUzzacld6ARMAHLWdW9/oSJ
# CDCCBVkwggRBoAMCAQICED141/l2SWCyYX308B7KhiowDQYJKoZIhvcNAQELBQAw
# gcoxCzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5WZXJpU2lnbiwgSW5jLjEfMB0GA1UE
# CxMWVmVyaVNpZ24gVHJ1c3QgTmV0d29yazE6MDgGA1UECxMxKGMpIDIwMDYgVmVy
# aVNpZ24sIEluYy4gLSBGb3IgYXV0aG9yaXplZCB1c2Ugb25seTFFMEMGA1UEAxM8
# VmVyaVNpZ24gQ2xhc3MgMyBQdWJsaWMgUHJpbWFyeSBDZXJ0aWZpY2F0aW9uIEF1
# dGhvcml0eSAtIEc1MB4XDTEzMTIxMDAwMDAwMFoXDTIzMTIwOTIzNTk1OVowfzEL
# MAkGA1UEBhMCVVMxHTAbBgNVBAoTFFN5bWFudGVjIENvcnBvcmF0aW9uMR8wHQYD
# VQQLExZTeW1hbnRlYyBUcnVzdCBOZXR3b3JrMTAwLgYDVQQDEydTeW1hbnRlYyBD
# bGFzcyAzIFNIQTI1NiBDb2RlIFNpZ25pbmcgQ0EwggEiMA0GCSqGSIb3DQEBAQUA
# A4IBDwAwggEKAoIBAQCXgx4AFq8ssdIIxNdok1FgHnH24ke021hNI2JqtL9aG1H3
# ow0Yd2i72DarLyFQ2p7z518nTgvCl8gJcJOp2lwNTqQNkaC07BTOkXJULs6j20Tp
# Uhs/QTzKSuSqwOg5q1PMIdDMz3+b5sLMWGqCFe49Ns8cxZcHJI7xe74xLT1u3LWZ
# Qp9LYZVfHHDuF33bi+VhiXjHaBuvEXgamK7EVUdT2bMy1qEORkDFl5KK0VOnmVuF
# NVfT6pNiYSAKxzB3JBFNYoO2untogjHuZcrf+dWNsjXcjCtvanJcYISc8gyUXsBW
# UgBIzNP4pX3eL9cT5DiohNVGuBOGwhud6lo43ZvbAgMBAAGjggGDMIIBfzAvBggr
# BgEFBQcBAQQjMCEwHwYIKwYBBQUHMAGGE2h0dHA6Ly9zMi5zeW1jYi5jb20wEgYD
# VR0TAQH/BAgwBgEB/wIBADBsBgNVHSAEZTBjMGEGC2CGSAGG+EUBBxcDMFIwJgYI
# KwYBBQUHAgEWGmh0dHA6Ly93d3cuc3ltYXV0aC5jb20vY3BzMCgGCCsGAQUFBwIC
# MBwaGmh0dHA6Ly93d3cuc3ltYXV0aC5jb20vcnBhMDAGA1UdHwQpMCcwJaAjoCGG
# H2h0dHA6Ly9zMS5zeW1jYi5jb20vcGNhMy1nNS5jcmwwHQYDVR0lBBYwFAYIKwYB
# BQUHAwIGCCsGAQUFBwMDMA4GA1UdDwEB/wQEAwIBBjApBgNVHREEIjAgpB4wHDEa
# MBgGA1UEAxMRU3ltYW50ZWNQS0ktMS01NjcwHQYDVR0OBBYEFJY7U/B5M5evfYPv
# LivMyreGHnJmMB8GA1UdIwQYMBaAFH/TZafC3ey78DAJ80M5+gKvMzEzMA0GCSqG
# SIb3DQEBCwUAA4IBAQAThRoeaak396C9pK9+HWFT/p2MXgymdR54FyPd/ewaA1U5
# +3GVx2Vap44w0kRaYdtwb9ohBcIuc7pJ8dGT/l3JzV4D4ImeP3Qe1/c4i6nWz7s1
# LzNYqJJW0chNO4LmeYQW/CiwsUfzHaI+7ofZpn+kVqU/rYQuKd58vKiqoz0EAeq6
# k6IOUCIpF0yH5DoRX9akJYmbBWsvtMkBTCd7C6wZBSKgYBU/2sn7TUyP+3Jnd/0n
# lMe6NQ6ISf6N/SivShK9DbOXBd5EDBX6NisD3MFQAfGhEV0U5eK9J0tUviuEXg+m
# w3QFCu+Xw4kisR93873NQ9TxTKk/tYuEr2Ty0BQhMYIEVTCCBFECAQEwgZMwfzEL
# MAkGA1UEBhMCVVMxHTAbBgNVBAoTFFN5bWFudGVjIENvcnBvcmF0aW9uMR8wHQYD
# VQQLExZTeW1hbnRlYyBUcnVzdCBOZXR3b3JrMTAwLgYDVQQDEydTeW1hbnRlYyBD
# bGFzcyAzIFNIQTI1NiBDb2RlIFNpZ25pbmcgQ0ECECosGt9a2i8BRI6xcprEe2Iw
# DQYJYIZIAWUDBAIBBQCggYQwGAYKKwYBBAGCNwIBDDEKMAigAoAAoQKAADAZBgkq
# hkiG9w0BCQMxDAYKKwYBBAGCNwIBBDAcBgorBgEEAYI3AgELMQ4wDAYKKwYBBAGC
# NwIBFTAvBgkqhkiG9w0BCQQxIgQgBuO9BF3DQJ9F40qrVRPjouKcDgu7D75w3c84
# P3urgAQwDQYJKoZIhvcNAQEBBQAEggEAL3+7b4YyU9zIHT63pnCtLTn0HCEZLYMG
# hf7rIspJ1bH1FfmMy1HycMYACgerUwcVHXALJmI0LUaHc0Jclu8cnUM3qUSa4mFY
# V9/bJ3l0NpgVrjFMGRQC6aPNxDRKL0LB4scNvPUdUWnMorvTDdPinMwv4h9PVa5d
# s1Khguu31xMdnrQYFsynyI/X3dbEWoUyVhQfV0JfbdDaCxh07fHMsreggv7B1Uq7
# 1JrqJTFTFrUOLFJ+psPnYSqlgs0wBZlprktdotTr7Uk5CPzfFKCq5By9qOy850lY
# rD15JkSybjUmLtpxpHtKU3QKlHSJJAl2XWOP5A+kcP0JiSziRH1S2qGCAgswggIH
# BgkqhkiG9w0BCQYxggH4MIIB9AIBATByMF4xCzAJBgNVBAYTAlVTMR0wGwYDVQQK
# ExRTeW1hbnRlYyBDb3Jwb3JhdGlvbjEwMC4GA1UEAxMnU3ltYW50ZWMgVGltZSBT
# dGFtcGluZyBTZXJ2aWNlcyBDQSAtIEcyAhAOz/Q4yP6/NW4E2GqYGxpQMAkGBSsO
# AwIaBQCgXTAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEP
# Fw0xODExMDcwOTE1MzBaMCMGCSqGSIb3DQEJBDEWBBQ1pPslOB1ayBGbHbzPAIU/
# Z4R3LzANBgkqhkiG9w0BAQEFAASCAQBQr6j6MU+SOk8R0NNM7U2bXFEus/+j6NhI
# 1ICjrF4w0i893nktu9OiubZHP4lDqjo4FJ6p4MLQ/71mEzpu4IX8RNdGW0pC/hi5
# quShoHcak4HAv4lrQDUUZzQjUbvHkahO2guca+AKGKZFMi78n0jt8S0ne82X3VU1
# LIGHSY9dZIM6YM0AcFS4i0U503YqS5hLb//Jqkhm02bQy96nyW8dJieBHMJH3Umi
# o1SFzx5E4MwwKpCuTJYkVZ5vE6Hc4oZA1akjBHMs28lt9V9Rni+zdq8HbrkOKrQZ
# 4EdJMdCsY7g+JSDC3Kr6hFsw63Qa+xUcRYHOpyz0dSrfIHner301
# SIG # End signature block