Configure Windows to use TLS 1.2 for applications that use the .NET 3.5.1 Framework

Summary

As part of improving ArcGIS Online security, Esri requires TLS 1.2 connections for ArcGIS Online services. Action is necessary to ensure access to these services.

The steps provided describe how to set the Windows operating system to use TLS 1.2. This enables all applications on the system that depend on the Microsoft .NET Framework 3.5.1 to use TLS 1.2. This is an operating system-level change and should only be done once. If you have already used these instructions and created the Windows Registry keys that enable TLS 1.2 on Windows for another Esri product, it is not necessary to repeat these steps.

This is an optional method for configuring ArcGIS applications to use TLS 1.2 when a product upgrade to explicitly support TLS 1.2 is not available or cannot be applied. The recommended solution is to upgrade to a product version that supports TLS 1.2. For information, see the Esri TLS Support page. Consider your situation carefully when deciding which approach to use – setting the OS environment to enable TLS 1.2 will not cause ArcGIS any problems, however, this may impact other .NET applications by changing their default TLS behavior.

Procedure

1. Install Microsoft updates to enable TLS 1.2. The following updates are available:
   • Windows 7 or Windows 2008 R2 – Microsoft update 3154518:
     Support for TLS System Default Versions included in the .NET Framework 3.5.1 on Windows 7 SP1 and Server 2008 R2 SP1
   • Windows 2012 – Microsoft update 3154519:
     Support for TLS System Default Versions included in the .NET Framework 3.5 on Windows Server 2012
2. Download the following zip file: TLS_NET35.zip.
3. Extract the file TLS_NET35.reg, and open the file to create the appropriate Windows Registry keys.
4. Test your TLS 1.2 Connections to ArcGIS Online.