2

I know similar questions have been asked. What I'm asking for are concrete instructions on what to do, or not do, for my particular installation. I have some questions that I can't find the answer to, and I need some answers before I can install Microsoft's hotfix.

The goal is to disable SSL 3 on the machine by adding the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\Schannel\Protocols\SSL 3.0\Server\ - add value Enabled = 0. However this causes SqlServerAgent to not start.

Running SQL Server 2008 R2 (SP3) build 10.50.6220.0 (X64).

enter image description here

Here's Microsoft's official download to enable TLS1.2 support: link to microsoft

The page reads First build that supports TLS 1.2 - 10.50.6542.0. This is higher than my build number. Does it mean the hotfix only is compatible with builds from 10.50.6542 and up? And so my build is not supported?

If my build is supported, then I supposed I should install it. Then what happens next?

Hannah Vernon
  • 70,928
  • 22
  • 177
  • 323
Jam
  • 155
  • 1
  • 2
  • 6

1 Answers1

2

In order to be compatible with TLS 1.2, you must be running SQL Server 2008 R2 version 10.50.6542.0 or later, with the SP2 TLS1.2 Update.

To get to that version level, you need to install Service Pack 3 for SQL Server 2008 R2, then install this update which will update your SQL Server to v 10.50.6542.

Hannah Vernon
  • 70,928
  • 22
  • 177
  • 323