1

I am currently using http and I have not enabled TLS 1.2. Can I switch all web applications to https through IIS and AAM and leave the registry settings without any change (not enforcing TLS 1.2)? Is there any Microsoft guideline regarding this topic?

Improve this question

2 Answers 2

Reset to default
2

Yes you can. You simply add the AAM to the Web App in Central Admin, then modify the IIS binding.

Improve this answer
2

Even in SharePoint/Windows 2016, TLS1.2 is not enforced by default, TLS1.0 TLS1.1 and TLS1.2 are available to clients. If you want to restrict to TLS1.2 only, you must configure some stuff. I implemented several TLS1.2 only installations and can absolutely recommend it.

Implementing SSL with TLS1.0/1.1/1.2 requires the following steps:

  • Obtain a Certificate with the hostnames used in SharePoint
  • Change AlternateAccessMappings in CentralAdministration
  • Change Bindings in IIS-Manager
  • Optional: Implement a redirect from HTTP to HTTPS
  • Also remember to change several URLs inside SharePoint (Search-Center, MySite-URL in UserProfileService)
  • Check content for absolute links with HTTP
Improve this answer
1
  • Thank you for answering, I did follow all these steps to enforce TLS 1.2 for main web app in SharePoint 2016, I have only pending to last 2 steps that you mentioned.
    – MLC
    Commented Sep 28, 2018 at 13:36

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.