AX2009 and TLS

[Lankey]

Hi
Is it possible to disable TLS 1.0 in Dynamics AX 2009 and move to TLS1.2 or 1.3?

I'm a touch concerned that this article states that it's impossible
https://community.dynamics.com/blogs...7-3331eefb13b8 , but I don't find any official documentation on the topic.

Any help would be hugely appreciated

[S.Kuskov]

Приведение типов в Axapta

[Товарищ ♂uatr]

Hey. We are using server's command: System.Net.ServicePointManager::set_SecurityProtocol(System.Net.SecurityProtocolType::SystemDefault); // exactly "default", this value recommended by MS
and yeah AOS' .net framework version to use 1.2/1.3 should be increased via the configuration change.
https://learn.microsoft.com/en-us/do...ntext-switches

[Lankey]

Цитата:

Сообщение от S.Kuskov

Приведение типов в Axapta

Thank you
Do I need to do this if I don't have any explicit customisations using .net?

[Lankey]

Цитата:

Сообщение от Товарищ ♂uatr

Hey. We are using server's command: System.Net.ServicePointManager::set_SecurityProtocol(System.Net.SecurityProtocolType::SystemDefault); // exactly "default", this value recommended by MS
and yeah AOS' .net framework version to use 1.2/1.3 should be increased via the configuration change.
https://learn.microsoft.com/en-us/do...ntext-switches

Sorry, I'm a bit confused:
1) When you are talking about the configuration change , do you mean that you use the same config file that was given in the S.Kuskov's post above?
2) Where do you use System.Net.ServicePointManager::set_SecurityProtocol(System.Net.SecurityProtocolType::SystemDefault); ?

[Товарищ ♂uatr]

Цитата:

Сообщение от Lankey

Sorry, I'm a bit confused:
1) When you are talking about the configuration change , do you mean that you use the same config file that was given in the S.Kuskov's post above?
2) Where do you use System.Net.ServicePointManager::set_SecurityProtocol(System.Net.SecurityProtocolType::SystemDefault); ?

1) yep, reconfiguration is the main part of it.
2) anywhere, but before request to an external system. This action sets up an environment and could be used once but for each AOS or a client.

[Lankey]

Цитата:

Сообщение от Товарищ ♂uatr

2) anywhere, but before request to an external system. This action sets up an environment and could be used once but for each AOS or a client.

Do you mean that I can simply add it for example to the аpplication.startupPost() so that it's always executed?

[Товарищ ♂uatr]

Sure, you can.
https://learn.microsoft.com/en-us/do...curityprotocol

[Lankey]

The client says that they disabled TLS 1.0 in PrePROD and did not do any special setups/configs on AX side.

Miraculously AX is working fine. but .... they can't test all the processes (integrations for example) in PrePROD so the question is if they'll run into trouble upon disabling TLS 1.0 in PROD

What types of jobs and processes can fail ?
Are there any standard ones that can fail too?