Use the search feature to view Kepware's repository of more than 500 Knowledge Base articles. Narrow your results or type your query into the search field below.

Alternatively, if you are unable to find a solution, we have an additional resource - our PTC eSupport Portal . If you are prompted to log into the eSupport Portal, you can use your My Kepware credentials. Need a My Kepware account? Create one here .

Search Solution Results By:
View All Solutions

Kepware Knowledge Base: Solution


After installing KEPServerEX 6, Applications Using SSL or TLS No Longer Work

Last Update: 11/12/2018
Print
To enable the feature that allows users to activate licenses directly from the License Utility, a global registry setting was added to enable Transport Layer Security (TLS) 1.2. Per Microsoft's recommendations (link below), this change enables TLS 1.1 and TLS 1.2 while disabling deprecated, and soon to be deprecated, protocols (such as SSL and TLS 1.0).

The registry key is called "DefalutSecureProtocols" and is located in HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\WinHttp (or HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\WinHttp on a 32bit Operating system). The value is set to "0xA00" to enables TLS versions 1.2 and 1.1.

See Microsoft Knowledge Base 3140245 for more details on this setting.

Problem
After installing KEPServerEX 6.0 and higher, some applications (such as Microsoft Office/Exchange and Cisco AnyConnect) no longer function as expected.

Solution 1 - Upgrade
Update applications that are using protocols such as SSL and TLS 1.0.

Solution 2 - Re-enable the Protocols
  1. Launch regedit.exe.
  2. Browse to: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\WinHttp (or HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\WinHttp on a 32bit Operating system).
  3. Change the value of DefaultSecureProtocols from 0xA00 to 0xAA8.

Solution 3 - Delete the DefalutSecureProtocols Registry Key
  1. Launch regedit.exe.
  2. Browse to: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\WinHttp (or HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\WinHttp on a 32bit Operating system).
  3. Delete DefaultSecureProtocols.

Re-installing KEPServerEX reintroduces this key.

Note: Changes made to the DefalutSecureProtocols key may prevent the ability to activate licenses directly from the License Utility.

Related Products
KEPServerEX

© 2019 PTC Inc. All Rights Reserved.