English

How To: Configure Windows to use TLS 1.2 for ArcGIS Desktop

Summary

Note:
This is an optional solution to configure ArcGIS Desktop to use TLS 1.2. For a description of the other options, including the recommended one, see: FAQ: How do I enable TLS 1.2 on ArcGIS Desktop?

As part of improving ArcGIS Online security, Esri requires TLS 1.2 connections for ArcGIS Online services. Action is necessary to ensure access to these services.

The methods below describe how to configure the Windows operating system to use TLS 1.2. This enables all applications on the system that depend on the Microsoft .NET Framework to use TLS 1.2.

Note:
Esri has certified that setting the .NET environment to enable TLS 1.2 will not cause problems with ArcGIS;  however, this may impact other .NET applications by changing their default TLS behavior. Consult a qualified computer systems professional, if necessary.

Procedure

Note:
After configuring and testing ArcGIS Desktop to use TLS 1.2, return to the Esri Support TLS Page for instructions on how to use TLS 1.2 with other Esri products.

The steps to enable Windows to use TLS 1.2 depend on the version of the .NET Framework installed on the system. Esri recommends using .NET4, if possible.

  1. Verify the version of .NET in use. This information can be obtained from the following Microsoft Help document:
    How to: Determine which .NET Framework versions are installed.
  2. If .NET4 is already installed, follow these steps to configure the Windows OS to use TLS 1.2:
    1. Download the zip file: TLS_NET4.zip.
    2. Extract the contents of the zipped file, and double-click the file TLS_NET4.reg to create the appropriate Windows Registry keys.
    3. Test your TLS 1.2 connection to ArcGIS Online.
  3. If .NET4 is not installed on the system, Esri recommends installing it:
    1. Download and install .NET4 from the Microsoft Download Center:
      Microsoft .NET Framework 4.7 (Web Installer).
    2. Follow the steps in Section B above.
  4. If the system is using .NET Version 3.5.1, and it is not feasible to upgrade to .NET4, use the following steps to enable TLS 1.2:
    1. Install Microsoft updates to enable TLS 1.2. The following updates are available:
    2. Download the following zip file: TLS_NET35.zip.
    3. Extract the file TLS_NET35.reg, and double-click it to create the appropriate Windows Registry keys.
    4. Test your TLS 1.2 connection to ArcGIS Online.
Note:
See the Product Life Cycle pages on the Esri Support site for the support status of each released version of ArcGIS Desktop.

Related Information