{"id":2615,"date":"2017-10-31T15:50:08","date_gmt":"2017-10-31T21:50:08","guid":{"rendered":"https:\/\/kevinjustin.com\/blog\/?p=2615"},"modified":"2019-12-20T13:11:39","modified_gmt":"2019-12-20T17:11:39","slug":"set-up-scom-2016-for-tls1-2","status":"publish","type":"post","link":"https:\/\/kevinjustin.com\/blog\/2017\/10\/31\/set-up-scom-2016-for-tls1-2\/","title":{"rendered":"Set up SCOM 2016 for TLS1.2"},"content":{"rendered":"<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-2625\" src=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2017\/10\/Safety.jpg\" alt=\"\" width=\"217\" height=\"240\" \/><\/p>\n<p>Security bugging you about SCOM using TLS1.0 ?<\/p>\n<p>&nbsp;<\/p>\n<p>Have questions on the TLS1.2 Protocol Support Deployment guide <a href=\"https:\/\/support.microsoft.com\/en-us\/help\/4051111\/tls-1-2-protocol-support-deployment-guide-for-system-center-2016\" target=\"_blank\" rel=\"noopener noreferrer\">link<\/a>?<\/p>\n<p>If using ACS, please review\u00a0ACS steps to configure from the\u00a0guide above<\/p>\n<p>&nbsp;<\/p>\n<p>It&#8217;s time to update SCOM 2016 to TLS1.2!<\/p>\n<p>&nbsp;<\/p>\n<p><strong>Pre-requisites<\/strong><\/p>\n<p>.Net and SQL native client, ODBC\u00a0must be updated to TLS1.2 compliant version<\/p>\n<p>HTTPS Endpoints must be CA signed certificates using SHA1 or SHA2<\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<h2>Ensure .Net version 4.6 is installed on all SC components<\/h2>\n<p>Determine which .Net is installed <a href=\"https:\/\/docs.microsoft.com\/en-us\/dotnet\/framework\/migrationguide\/how-to-determine-which-versions-are-installed\" target=\"_blank\" rel=\"noopener noreferrer\">https:\/\/docs.microsoft.com\/en-us\/dotnet\/framework\/migrationguide\/how-to-determine-which-versions-are-installed<\/a><\/p>\n<p>From PowerShell (run as admin is NOT required)<\/p>\n<p><span style=\"color: #3366ff;\"><span style=\"color: #3366ff;\">Get-ChildItem &#8216;HKLM:\\SOFTWARE\\Microsoft\\NET Framework Setup\\NDP&#8217; -recurse | Get-ItemProperty -name Version,Release -EA 0 | Where { $_.PSChildName -match &#8216;^(?!S)\\p{L}&#8217;} | Select PSChildName, Version, Release<\/span><\/span><\/p>\n<p>&nbsp;<\/p>\n<p>Above commands from StackOverFlow <a href=\"https:\/\/stackoverflow.com\/questions\/3487265\/powershell-script-to-return-versions-of-net-framework-ona-machine\" target=\"_blank\" rel=\"noopener noreferrer\">article<\/a><\/p>\n<p>Guide to .Net versions and dependencies <a href=\"https:\/\/docs.microsoft.com\/enus\/dotnet\/framework\/migration-guide\/versions-and-dependencies\" target=\"_blank\" rel=\"noopener noreferrer\">https:\/\/docs.microsoft.com\/enus\/dotnet\/framework\/migration-guide\/versions-and-dependencies<\/a><\/p>\n<p>&nbsp;<\/p>\n<p>Sample output from win2k8R2 sp1 server (and same from 2016 server)<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-2635 size-full\" src=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2017\/10\/DotNet-Output.PNG\" alt=\"\" width=\"1129\" height=\"201\" \/><\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<h2>SQL Server updates<\/h2>\n<p>Install the required SQL server update supporting TLS1.2<\/p>\n<p>From PowerShell as Administrator<br \/>\n<span style=\"color: #3366ff;\">Invoke-Sqlcmd -Query &#8220;SELECT @@VERSION;&#8221; -QueryTimeout 3<\/span><\/p>\n<p>Example Output<br \/>\nPS C:\\Windows\\system32&gt; Invoke-Sqlcmd -Query &#8220;SELECT @@VERSION;&#8221; -QueryTimeout 3<br \/>\nColumn1<\/p>\n<p>&#8212;&#8212;<\/p>\n<p>Microsoft SQL Server 2016 (RTM-GDR) (KB3210111) &#8211; 13.0.1728.2 (X64) &#8230;<\/p>\n<p>OR<\/p>\n<p>Microsoft SQL Server 2008 R2 (SP2) &#8211; 10.50.4000.0 (X64)<\/p>\n<p>&nbsp;<\/p>\n<p><strong>Compare to SQL matrix to\u00a0download and install appropriate version<\/strong><br \/>\nTLS 1.2 SQL Support <a href=\"https:\/\/support.microsoft.com\/en-in\/help\/3135244\/tls-1.2-support-for-microsoft-sql-server\" target=\"_blank\" rel=\"noopener noreferrer\">https:\/\/support.microsoft.com\/en-in\/help\/3135244\/tls-1.2-support-for-microsoft-sql-server<\/a><br \/>\n<span style=\"color: #ff0000;\">NOTE Verify you are running a compliant cumulative update (CU), you will need the patch (SQL2016 natively supports TLS1.2)<\/span><br \/>\nSQL Server 2008R2 SP2 is NOT supported for TLS1.2\u00a0 <a href=\"https:\/\/blogs.msdn.microsoft.com\/sqlreleaseservices\/tls-1-2-support-for-sql-server-2008-2008-r2-2012and-2014\/\" target=\"_blank\" rel=\"noopener noreferrer\">https:\/\/blogs.msdn.microsoft.com\/sqlreleaseservices\/tls-1-2-support-for-sql-server-2008-2008-r2-2012and-2014\/<\/a><\/p>\n<p>&nbsp;<\/p>\n<p><strong>Install the required SQL Native Client<\/strong><br \/>\nFYI &#8211; SQL 2016 uses the SQL 2012 Native client<br \/>\nDownload link <a href=\"https:\/\/www.microsoft.com\/en-us\/download\/details.aspx?id=50402\" target=\"_blank\" rel=\"noopener noreferrer\">https:\/\/www.microsoft.com\/en-us\/download\/details.aspx?id=50402<\/a><\/p>\n<p>&nbsp;<\/p>\n<p><span style=\"color: #ff0000;\">SQL Native client 11.0 should be installed on\u00a0ALL MS and SQL servers (SQL 2008-2016)<\/span><\/p>\n<p>From PowerShell as Administrator<br \/>\n<span style=\"color: #3366ff;\">get-odbcdriver -name &#8220;SQL Server Native Client*&#8221;<\/span><\/p>\n<p>&nbsp;<\/p>\n<p>Example Output<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-2646\" src=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2017\/10\/SQLODBCdriver-Output.PNG\" alt=\"\" width=\"409\" height=\"173\" \/><\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p>From Control Panel, Programs and Features, Installed Programs<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-2645\" src=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2017\/10\/ControlPanel-Programs.PNG\" alt=\"\" width=\"1004\" height=\"207\" \/><\/p>\n<p>&nbsp;<\/p>\n<p><strong>Stop SQL Server and SQL Server agent services<\/strong><br \/>\n<span style=\"color: #3366ff;\">Stop-service SQLSERVERAGENT <\/span><\/p>\n<p><span style=\"color: #3366ff;\">Stop-service MSSQLSERVER<\/span><\/p>\n<p>&nbsp;<\/p>\n<p><strong>Install SQL Native Client MSI<\/strong><\/p>\n<p>Double click on SQL Native Client MSI file to begin installation<\/p>\n<p>Click on Yes to begin installation<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-2655\" src=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2017\/10\/SQL2012NativeClientInstall.PNG\" alt=\"\" width=\"996\" height=\"757\" \/><\/p>\n<p>Click Next on the Installer window<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-2735\" src=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2017\/10\/SQL2012NativeClientInstall-1.PNG\" alt=\"\" width=\"746\" height=\"571\" \/><\/p>\n<p>&nbsp;<\/p>\n<p>Click I accept radio button<\/p>\n<p>Click Next<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-2725\" src=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2017\/10\/SQL2012NativeClientInstall-2.PNG\" alt=\"\" width=\"746\" height=\"569\" \/><\/p>\n<p>&nbsp;<\/p>\n<p>Click Next on Feature Selection<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-2715\" src=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2017\/10\/SQL2012NativeClientInstall-3.PNG\" alt=\"\" width=\"745\" height=\"597\" \/><\/p>\n<p>&nbsp;<\/p>\n<p>Click Install<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-2707\" src=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2017\/10\/SQL2012NativeClientInstall-4.PNG\" alt=\"\" width=\"747\" height=\"569\" \/><\/p>\n<p>&nbsp;<\/p>\n<p>Click Yes on User Account Control (UAC) prompt<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-2705\" src=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2017\/10\/UAC.PNG\" alt=\"\" width=\"493\" height=\"367\" \/><\/p>\n<p>&nbsp;<\/p>\n<p>Stop SQL Server and SQL Server agent (if they restarted)<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-2695\" src=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2017\/10\/FilesInUse.PNG\" alt=\"\" width=\"508\" height=\"391\" \/><\/p>\n<p>&nbsp;<\/p>\n<p>Watch installer status<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-2685\" src=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2017\/10\/SQL2012NativeClientInstall-5.PNG\" alt=\"\" width=\"509\" height=\"390\" \/><\/p>\n<p>&nbsp;<\/p>\n<p>Click Finish when complete<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-2676\" src=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2017\/10\/SQL2012NativeClientInstall-Finish.PNG\" alt=\"\" width=\"504\" height=\"385\" \/><\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<h2>Verify SQL Native Client Verification<\/h2>\n<p><strong>Verify SQL services are running<\/strong><br \/>\nStop SQL Server and SQL Server agent services From PowerShell as Admin<br \/>\n<span style=\"color: #3366ff;\">Get-service SQLSERVERAGENT <\/span><\/p>\n<p><span style=\"color: #3366ff;\">Get-service MSSQLSERVER <\/span><\/p>\n<p>From PowerShell as Admin If necessary, start SQL Server and SQL Server agent services<br \/>\n<span style=\"color: #3366ff;\">Start-service SQLSERVERAGENT <\/span><\/p>\n<p><span style=\"color: #3366ff;\">Start-service MSSQLSERVER <\/span><br \/>\n<strong>Verify Installer completed<\/strong><br \/>\nIn Event Viewer, Windows Logs, Application look for event 11728<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-2665\" src=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2017\/10\/EventViewer-11728-Output.PNG\" alt=\"\" width=\"686\" height=\"473\" \/><\/p>\n<p>&nbsp;<\/p>\n<p>From PowerShell<\/p>\n<p><span style=\"color: #3366ff;\">Get-EventLog -LogName Application | ? { $_.InstanceId -eq 11728 }<\/span><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-2675\" src=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2017\/10\/Get-EventLog.PNG\" alt=\"\" width=\"842\" height=\"169\" \/><\/p>\n<p>Rinse and Repeat for other MS and SQL servers in environment<strong><br \/>\n<\/strong><\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<h2>Install ODBC on all Management Servers<\/h2>\n<p>&nbsp;<\/p>\n<p>For SCOM &amp; SM, ODBC 11.0 or ODBC 13.0 should be installed on all MS and SQL\u00a0servers<\/p>\n<p>&nbsp;<\/p>\n<p><strong>Verify ODBC v11 for server win2k8R2<\/strong><\/p>\n<p>From Control Panel<\/p>\n<p>Click on Programs<\/p>\n<p>Click on Programs and Features<\/p>\n<p>Search for ODBC<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-2765\" src=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2017\/10\/ODBC-win2k8r2.PNG\" alt=\"\" width=\"935\" height=\"224\" \/><\/p>\n<p>&nbsp;<\/p>\n<p><strong>Verify ODBC v13 for Server 2016<\/strong><\/p>\n<p>Verify version from PowerShell\u00a0(run as administrator NOT required)<br \/>\n<span style=\"color: #3366ff;\">get-odbcdriver -name &#8220;ODBC Driver * SQL Server&#8221;<\/span><\/p>\n<p>&nbsp;<\/p>\n<p>Output<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-2756\" src=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2017\/10\/ODBC-Driver.PNG\" alt=\"\" width=\"498\" height=\"133\" \/><\/p>\n<p>Download and install appropriate version<\/p>\n<p>11.0: <a href=\"https:\/\/www.microsoft.com\/en-us\/download\/details.aspx?id=36434\" target=\"_blank\" rel=\"noopener noreferrer\">https:\/\/www.microsoft.com\/en-us\/download\/details.aspx?id=36434<\/a> (Version 2.0.5543.11)<br \/>\n13.0: <a href=\"https:\/\/www.microsoft.com\/en-us\/download\/details.aspx?id=50420\" target=\"_blank\" rel=\"noopener noreferrer\">https:\/\/www.microsoft.com\/en-us\/download\/details.aspx?id=50420<\/a><br \/>\n<strong>Verify Installer completed<\/strong><br \/>\nIn Event Viewer, Windows Logs, Application look for event 11728<\/p>\n<p>&nbsp;<\/p>\n<p>From PowerShell<\/p>\n<p><span style=\"color: #3366ff;\">Get-EventLog -LogName Application | ? { $_.InstanceId -eq 11728 } | ? { $_.Message -like &#8220;*Microsoft ODBC*&#8221;<\/span><\/p>\n<p>&nbsp;<\/p>\n<p>Output<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-2785\" src=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2017\/10\/ODBC-PowerShell-Verification.PNG\" alt=\"\" width=\"966\" height=\"126\" \/><\/p>\n<p>&nbsp;<\/p>\n<h2><\/h2>\n<p><span style=\"color: #ff0000;\">NOTE Please make sure servers are patched with latest Monthly Rollup Updates<\/span><\/p>\n<p>Had issue where KB3080079 was NOT installed on server.\u00a0 Patch applied to\u00a0Win7, Server 2008,2008R2<\/p>\n<p>From Powershell<\/p>\n<p><span style=\"color: #3366ff;\">get-hotfix -id KB3080079<\/span><\/p>\n<p>&nbsp;<\/p>\n<p>Output<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-2795\" src=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2017\/10\/KB3080079.PNG\" alt=\"\" width=\"720\" height=\"139\" \/><\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<h2>Install SCOM 2016 UR4 update<\/h2>\n<p>See Kevin Holman&#8217;s UR4 install blog <a href=\"https:\/\/blogs.technet.microsoft.com\/kevinholman\/2017\/10\/28\/ur4-for-scom-2016-step-by-step\/\" target=\"_blank\" rel=\"noopener noreferrer\">https:\/\/blogs.technet.microsoft.com\/kevinholman\/2017\/10\/28\/ur4-for-scom-2016-step-by-step\/<\/a><\/p>\n<p>&nbsp;<\/p>\n<p>Time to enable TLS1.2 Secure Channel messages on MS and SQL server (gateway if installed in your environment)<\/p>\n<p>See Gallery for add\/query\/remove registry keys<\/p>\n<p>&nbsp;<\/p>\n<p><strong>Add SCHANNEL path for TLS<\/strong><\/p>\n<p><span style=\"text-align: left; color: #000000; text-indent: 0px; letter-spacing: normal; font-family: Menlo,Monaco,Consolas,'Courier New',monospace; font-size: 14.86px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; float: none; background-color: #ffffff;\"><span style=\"color: #3366ff;\">$ProtocolList\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 = @(&#8220;SSL 2.0&#8243;,&#8221;SSL 3.0&#8243;,&#8221;TLS 1.0&#8221;, &#8220;TLS 1.1&#8221;, &#8220;TLS 1.2&#8221;)<\/span><br \/>\n<span style=\"color: #3366ff;\">$ProtocolSubKeyList = @(&#8220;Client&#8221;, &#8220;Server&#8221;)<\/span><br \/>\n<span style=\"color: #3366ff;\">$DisabledByDefault = &#8220;DisabledByDefault&#8221;<\/span><br \/>\n<span style=\"color: #3366ff;\">$Enabled = &#8220;Enabled&#8221;<\/span><br \/>\n<span style=\"color: #3366ff;\">$registryPath = &#8220;HKLM:\\\\SYSTEM\\CurrentControlSet\\Control\\SecurityProviders\\SCHANNEL\\Protocols\\&#8221;<\/span><\/span><\/p>\n<p><span style=\"color: #3366ff;\">foreach($Protocol in $ProtocolList)<\/span><br \/>\n<span style=\"color: #3366ff;\">{<\/span><br \/>\n<span style=\"color: #3366ff;\">\u00a0\u00a0\u00a0 Write-Host &#8221; In 1st For loop&#8221;<\/span><br \/>\n<span style=\"color: #3366ff;\"> foreach($key in $ProtocolSubKeyList)<\/span><br \/>\n<span style=\"color: #3366ff;\"> { <\/span><br \/>\n<span style=\"color: #3366ff;\"> $currentRegPath = $registryPath + $Protocol + &#8220;\\&#8221; + $key<\/span><br \/>\n<span style=\"color: #3366ff;\"> Write-Host &#8221; Current Registry Path $currentRegPath&#8221;<\/span><\/p>\n<p><span style=\"color: #3366ff;\"> if(!(Test-Path $currentRegPath))<\/span><br \/>\n<span style=\"color: #3366ff;\"> {<\/span><br \/>\n<span style=\"color: #3366ff;\"> \u00a0\u00a0\u00a0 Write-Host &#8220;creating the registry&#8221;<\/span><br \/>\n<span style=\"color: #3366ff;\"> New-Item -Path $currentRegPath -Force | out-Null <\/span><br \/>\n<span style=\"color: #3366ff;\"> }<\/span><br \/>\n<span style=\"color: #3366ff;\"> if($Protocol -eq &#8220;TLS 1.2&#8221;)<\/span><br \/>\n<span style=\"color: #3366ff;\"> {<\/span><br \/>\n<span style=\"color: #3366ff;\"> \u00a0\u00a0\u00a0 Write-Host &#8220;Working for TLS 1.2&#8221;<\/span><br \/>\n<span style=\"color: #3366ff;\"> New-ItemProperty -Path $currentRegPath -Name $DisabledByDefault -Value &#8220;0&#8221; -PropertyType DWORD -Force | Out-Null<\/span><br \/>\n<span style=\"color: #3366ff;\"> New-ItemProperty -Path $currentRegPath -Name $Enabled -Value &#8220;1&#8221; -PropertyType DWORD -Force | Out-Null<\/span><\/p>\n<p><span style=\"color: #3366ff;\"> }<\/span><br \/>\n<span style=\"color: #3366ff;\"> else<\/span><br \/>\n<span style=\"color: #3366ff;\"> {<\/span><br \/>\n<span style=\"color: #3366ff;\"> \u00a0\u00a0\u00a0 Write-Host &#8220;Working for other protocol&#8221;<\/span><br \/>\n<span style=\"color: #3366ff;\"> New-ItemProperty -Path $currentRegPath -Name $DisabledByDefault -Value &#8220;1&#8221; -PropertyType DWORD -Force | Out-Null<\/span><br \/>\n<span style=\"color: #3366ff;\"> New-ItemProperty -Path $currentRegPath -Name $Enabled -Value &#8220;0&#8221; -PropertyType DWORD -Force | Out-Null<\/span><br \/>\n<span style=\"color: #3366ff;\"> } <\/span><br \/>\n<span style=\"color: #3366ff;\"> }<\/span><br \/>\n<span style=\"color: #3366ff;\">}<\/span><\/p>\n<p><span style=\"color: #3366ff;\">\u00a0<\/span><\/p>\n<p># Tighten up the .NET Framework<br \/>\n<span style=\"color: #3366ff;\">$NetRegistryPath = &#8220;HKLM:\\SOFTWARE\\Microsoft\\.NETFramework\\v4.0.30319&#8221;<\/span><br \/>\n<span style=\"color: #3366ff;\">\u00a0New-ItemProperty -Path $NetRegistryPath -Name &#8220;SchUseStrongCrypto&#8221; -Value &#8220;1&#8221; -PropertyType DWORD -Force | Out-Null<\/span><\/p>\n<p><span style=\"color: #3366ff;\">$NetRegistryPath = &#8220;HKLM:\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\v4.0.30319&#8221;<\/span><br \/>\n<span style=\"color: #3366ff;\">\u00a0New-ItemProperty -Path $NetRegistryPath -Name &#8220;SchUseStrongCrypto&#8221; -Value &#8220;1&#8221; -PropertyType DWORD -Force | Out-Null<\/span><\/p>\n<p>&nbsp;<\/p>\n<p>Restart servers<\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p><strong>Verify SCOM Console for alerts and connectivity<\/strong><\/p>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Security bugging you about SCOM using TLS1.0 ? &nbsp; Have questions on the TLS1.2 Protocol Support Deployment guide link? If using ACS, please review\u00a0ACS steps to configure from the\u00a0guide above &nbsp; It&#8217;s time to update SCOM 2016 to TLS1.2! &nbsp; Pre-requisites .Net and SQL native client, ODBC\u00a0must be updated to TLS1.2 compliant version HTTPS Endpoints &hellip; <a href=\"https:\/\/kevinjustin.com\/blog\/2017\/10\/31\/set-up-scom-2016-for-tls1-2\/\" class=\"more-link\">Continue reading<span class=\"screen-reader-text\"> &#8220;Set up SCOM 2016 for TLS1.2&#8221;<\/span><\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2,5],"tags":[14,15,327,342,349,410,445,446,466],"class_list":["post-2615","post","type-post","status-publish","format-standard","hentry","category-administration","category-best-practice","tag-net","tag-net-framework","tag-registry","tag-scom","tag-scom-2016","tag-sql","tag-tls","tag-tls1-2","tag-upgrade"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.5 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Set up SCOM 2016 for TLS1.2 - Kevin Justin&#039;s Blog<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/kevinjustin.com\/blog\/2017\/10\/31\/set-up-scom-2016-for-tls1-2\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Set up SCOM 2016 for TLS1.2 - Kevin Justin&#039;s Blog\" \/>\n<meta property=\"og:description\" content=\"Security bugging you about SCOM using TLS1.0 ? &nbsp; Have questions on the TLS1.2 Protocol Support Deployment guide link? If using ACS, please review\u00a0ACS steps to configure from the\u00a0guide above &nbsp; It&#8217;s time to update SCOM 2016 to TLS1.2! &nbsp; Pre-requisites .Net and SQL native client, ODBC\u00a0must be updated to TLS1.2 compliant version HTTPS Endpoints &hellip; Continue reading &quot;Set up SCOM 2016 for TLS1.2&quot;\" \/>\n<meta property=\"og:url\" content=\"https:\/\/kevinjustin.com\/blog\/2017\/10\/31\/set-up-scom-2016-for-tls1-2\/\" \/>\n<meta property=\"og:site_name\" content=\"Kevin Justin&#039;s Blog\" \/>\n<meta property=\"article:published_time\" content=\"2017-10-31T21:50:08+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2019-12-20T17:11:39+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2017\/10\/Safety.jpg\" \/>\n<meta name=\"author\" content=\"Kevin Justin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Kevin Justin\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2017\\\/10\\\/31\\\/set-up-scom-2016-for-tls1-2\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2017\\\/10\\\/31\\\/set-up-scom-2016-for-tls1-2\\\/\"},\"author\":{\"name\":\"Kevin Justin\",\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/#\\\/schema\\\/person\\\/213cdc5c6c3f2a1d9e8417c07440972d\"},\"headline\":\"Set up SCOM 2016 for TLS1.2\",\"datePublished\":\"2017-10-31T21:50:08+00:00\",\"dateModified\":\"2019-12-20T17:11:39+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2017\\\/10\\\/31\\\/set-up-scom-2016-for-tls1-2\\\/\"},\"wordCount\":882,\"commentCount\":0,\"image\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2017\\\/10\\\/31\\\/set-up-scom-2016-for-tls1-2\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/wp-content\\\/uploads\\\/2017\\\/10\\\/Safety.jpg\",\"keywords\":[\".net\",\".net framework\",\"registry\",\"SCOM\",\"scom 2016\",\"sql\",\"tls\",\"tls1.2\",\"upgrade\"],\"articleSection\":[\"Administration\",\"Best Practice\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2017\\\/10\\\/31\\\/set-up-scom-2016-for-tls1-2\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2017\\\/10\\\/31\\\/set-up-scom-2016-for-tls1-2\\\/\",\"url\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2017\\\/10\\\/31\\\/set-up-scom-2016-for-tls1-2\\\/\",\"name\":\"Set up SCOM 2016 for TLS1.2 - Kevin Justin&#039;s Blog\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2017\\\/10\\\/31\\\/set-up-scom-2016-for-tls1-2\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2017\\\/10\\\/31\\\/set-up-scom-2016-for-tls1-2\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/wp-content\\\/uploads\\\/2017\\\/10\\\/Safety.jpg\",\"datePublished\":\"2017-10-31T21:50:08+00:00\",\"dateModified\":\"2019-12-20T17:11:39+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/#\\\/schema\\\/person\\\/213cdc5c6c3f2a1d9e8417c07440972d\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2017\\\/10\\\/31\\\/set-up-scom-2016-for-tls1-2\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2017\\\/10\\\/31\\\/set-up-scom-2016-for-tls1-2\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2017\\\/10\\\/31\\\/set-up-scom-2016-for-tls1-2\\\/#primaryimage\",\"url\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/wp-content\\\/uploads\\\/2017\\\/10\\\/Safety.jpg\",\"contentUrl\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/wp-content\\\/uploads\\\/2017\\\/10\\\/Safety.jpg\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2017\\\/10\\\/31\\\/set-up-scom-2016-for-tls1-2\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Set up SCOM 2016 for TLS1.2\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/\",\"name\":\"Kevin Justin&#039;s Blog\",\"description\":\"Operational monitoring tools including System Center, Azure Monitor\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/#\\\/schema\\\/person\\\/213cdc5c6c3f2a1d9e8417c07440972d\",\"name\":\"Kevin Justin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/4c2a0d1189dd1ad7f305cf08aa9c5e2d4cc8fc26fde7ca573d3fd7e75520334e?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/4c2a0d1189dd1ad7f305cf08aa9c5e2d4cc8fc26fde7ca573d3fd7e75520334e?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/4c2a0d1189dd1ad7f305cf08aa9c5e2d4cc8fc26fde7ca573d3fd7e75520334e?s=96&d=mm&r=g\",\"caption\":\"Kevin Justin\"},\"url\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/author\\\/kejustin\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Set up SCOM 2016 for TLS1.2 - Kevin Justin&#039;s Blog","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/kevinjustin.com\/blog\/2017\/10\/31\/set-up-scom-2016-for-tls1-2\/","og_locale":"en_US","og_type":"article","og_title":"Set up SCOM 2016 for TLS1.2 - Kevin Justin&#039;s Blog","og_description":"Security bugging you about SCOM using TLS1.0 ? &nbsp; Have questions on the TLS1.2 Protocol Support Deployment guide link? If using ACS, please review\u00a0ACS steps to configure from the\u00a0guide above &nbsp; It&#8217;s time to update SCOM 2016 to TLS1.2! &nbsp; Pre-requisites .Net and SQL native client, ODBC\u00a0must be updated to TLS1.2 compliant version HTTPS Endpoints &hellip; Continue reading \"Set up SCOM 2016 for TLS1.2\"","og_url":"https:\/\/kevinjustin.com\/blog\/2017\/10\/31\/set-up-scom-2016-for-tls1-2\/","og_site_name":"Kevin Justin&#039;s Blog","article_published_time":"2017-10-31T21:50:08+00:00","article_modified_time":"2019-12-20T17:11:39+00:00","og_image":[{"url":"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2017\/10\/Safety.jpg","type":"","width":"","height":""}],"author":"Kevin Justin","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Kevin Justin","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/kevinjustin.com\/blog\/2017\/10\/31\/set-up-scom-2016-for-tls1-2\/#article","isPartOf":{"@id":"https:\/\/kevinjustin.com\/blog\/2017\/10\/31\/set-up-scom-2016-for-tls1-2\/"},"author":{"name":"Kevin Justin","@id":"https:\/\/kevinjustin.com\/blog\/#\/schema\/person\/213cdc5c6c3f2a1d9e8417c07440972d"},"headline":"Set up SCOM 2016 for TLS1.2","datePublished":"2017-10-31T21:50:08+00:00","dateModified":"2019-12-20T17:11:39+00:00","mainEntityOfPage":{"@id":"https:\/\/kevinjustin.com\/blog\/2017\/10\/31\/set-up-scom-2016-for-tls1-2\/"},"wordCount":882,"commentCount":0,"image":{"@id":"https:\/\/kevinjustin.com\/blog\/2017\/10\/31\/set-up-scom-2016-for-tls1-2\/#primaryimage"},"thumbnailUrl":"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2017\/10\/Safety.jpg","keywords":[".net",".net framework","registry","SCOM","scom 2016","sql","tls","tls1.2","upgrade"],"articleSection":["Administration","Best Practice"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/kevinjustin.com\/blog\/2017\/10\/31\/set-up-scom-2016-for-tls1-2\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/kevinjustin.com\/blog\/2017\/10\/31\/set-up-scom-2016-for-tls1-2\/","url":"https:\/\/kevinjustin.com\/blog\/2017\/10\/31\/set-up-scom-2016-for-tls1-2\/","name":"Set up SCOM 2016 for TLS1.2 - Kevin Justin&#039;s Blog","isPartOf":{"@id":"https:\/\/kevinjustin.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/kevinjustin.com\/blog\/2017\/10\/31\/set-up-scom-2016-for-tls1-2\/#primaryimage"},"image":{"@id":"https:\/\/kevinjustin.com\/blog\/2017\/10\/31\/set-up-scom-2016-for-tls1-2\/#primaryimage"},"thumbnailUrl":"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2017\/10\/Safety.jpg","datePublished":"2017-10-31T21:50:08+00:00","dateModified":"2019-12-20T17:11:39+00:00","author":{"@id":"https:\/\/kevinjustin.com\/blog\/#\/schema\/person\/213cdc5c6c3f2a1d9e8417c07440972d"},"breadcrumb":{"@id":"https:\/\/kevinjustin.com\/blog\/2017\/10\/31\/set-up-scom-2016-for-tls1-2\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/kevinjustin.com\/blog\/2017\/10\/31\/set-up-scom-2016-for-tls1-2\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/kevinjustin.com\/blog\/2017\/10\/31\/set-up-scom-2016-for-tls1-2\/#primaryimage","url":"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2017\/10\/Safety.jpg","contentUrl":"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2017\/10\/Safety.jpg"},{"@type":"BreadcrumbList","@id":"https:\/\/kevinjustin.com\/blog\/2017\/10\/31\/set-up-scom-2016-for-tls1-2\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/kevinjustin.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Set up SCOM 2016 for TLS1.2"}]},{"@type":"WebSite","@id":"https:\/\/kevinjustin.com\/blog\/#website","url":"https:\/\/kevinjustin.com\/blog\/","name":"Kevin Justin&#039;s Blog","description":"Operational monitoring tools including System Center, Azure Monitor","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/kevinjustin.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/kevinjustin.com\/blog\/#\/schema\/person\/213cdc5c6c3f2a1d9e8417c07440972d","name":"Kevin Justin","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/4c2a0d1189dd1ad7f305cf08aa9c5e2d4cc8fc26fde7ca573d3fd7e75520334e?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/4c2a0d1189dd1ad7f305cf08aa9c5e2d4cc8fc26fde7ca573d3fd7e75520334e?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/4c2a0d1189dd1ad7f305cf08aa9c5e2d4cc8fc26fde7ca573d3fd7e75520334e?s=96&d=mm&r=g","caption":"Kevin Justin"},"url":"https:\/\/kevinjustin.com\/blog\/author\/kejustin\/"}]}},"_links":{"self":[{"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/posts\/2615","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/comments?post=2615"}],"version-history":[{"count":3,"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/posts\/2615\/revisions"}],"predecessor-version":[{"id":6617,"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/posts\/2615\/revisions\/6617"}],"wp:attachment":[{"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/media?parent=2615"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/categories?post=2615"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/tags?post=2615"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}