Configure Windows to use TLS 1.2 for ArcGIS Desktop

Summary

Note:
This is an optional solution to configure ArcGIS Desktop to use TLS 1.2. For a description of the other options, including the recommended one, see: FAQ: How do I enable TLS 1.2 on ArcGIS Desktop?

As part of improving ArcGIS Online security, Esri requires TLS 1.2 connections for ArcGIS Online services. Action is necessary to ensure access to these services.

The methods below describe how to configure the Windows operating system to use TLS 1.2. This enables all applications on the system that depend on the Microsoft .NET Framework to use TLS 1.2.

Note:
Esri has certified that setting the .NET environment to enable TLS 1.2 will not cause problems with ArcGIS;  however, this may impact other .NET applications by changing their default TLS behavior. Consult a qualified computer systems professional, if necessary.

Procedure

Note:
After configuring and testing ArcGIS Desktop to use TLS 1.2, return to the Esri Support TLS Page for instructions on how to use TLS 1.2 with other Esri products.

The steps to enable Windows to use TLS 1.2 depend on the version of the .NET Framework installed on the system. Esri recommends using .NET4, if possible.

1. Verify the version of .NET in use. This information can be obtained from the following Microsoft Help document:
   How to: Determine which .NET Framework versions are installed.
2. If .NET4 is already installed, follow these steps to configure the Windows OS to use TLS 1.2:
   1. Download the zip file: TLS_NET4.zip.
   2. Extract the contents of the zipped file, and double-click the file TLS_NET4.reg to create the appropriate Windows Registry keys.
   3. Test your TLS 1.2 connection to ArcGIS Online.
3. If .NET4 is not installed on the system, Esri recommends installing it:
   1. Download and install .NET4 from the Microsoft Download Center:
      Microsoft .NET Framework 4.7 (Web Installer).
   2. Follow the steps in Section B above.
4. If the system is using .NET Version 3.5.1, and it is not feasible to upgrade to .NET4, use the following steps to enable TLS 1.2:
   1. Install Microsoft updates to enable TLS 1.2. Microsoft recommends installing all operating system updates. See: Transport Layer Security (TLS) best practices with the .NET Framework: Requirements to support TLS 1.2 with .NET Framework 3.5
      The following TLS 1.2 updates are available:
      • Windows 7 SP1 or Windows Server 2008 R2 SP1 – Microsoft update 3154518:
        Support for TLS System Default Versions included in the .NET Framework 3.5.1 on Windows 7 SP1 and Server 2008 R2 SP1
      • Windows 8.0 or Windows Server 2012 – Microsoft update 3154519:
        Support for TLS System Default Versions included in the .NET Framework 3.5 on Windows Server 2012
      • Windows 8.1 or Windows Server 2012 R2: Support for TLS System Default Versions included in the .NET Framework 3.5 on Windows 8.1 and Windows Server 2012 R2
      • Windows 10 or Windows Server 2016: Cumulative Update for Windows 10 Version 1511 and Windows Server 2016 Technical Preview 4: May 10, 2016
      • Windows Server 2008: Support for TLS System Default Versions included in the .NET Framework 2.0 SP2 on Windows Vista SP2 and Server 2008 SP2
      • Windows Vista: Not supported
   2. Download the following zip file: TLS_NET35.zip.
   3. Extract the file TLS_NET35.reg, and double-click it to create the appropriate Windows Registry keys.
   4. Test your TLS 1.2 connection to ArcGIS Online.

Note:
See the Product Life Cycle pages on the Esri Support site for the support status of each released version of ArcGIS Desktop.