How to determine what version TLS is in use on Lync 2010

rdefino
rdefino used Ask the Experts™
on
I need to determine what version TLS our Lync environment is using. Especially the edge servers themselves.

How can I do that?
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
View Solutions Only
systechSenior Technical Lead

Commented:
Hi,

The Lync client can only use TLS connections, this behavior is not configurable (greyed out bydefault). Open Lync client>>Tools>>Options>>Personal>>Advanced>>Bydefault it uses the automatic configuration which is TLS (under connect using "TLS").

Hope this helps :)
Lead Infrastructure Architect
Commented:
comment above it correct it will only work on TLS but...

to see what TLS protocols are server is responding on you can use something like SSLSCAN

http://sourceforge.net/projects/sslscan/

this shows support matrix

http://blogs.msdn.com/b/kaushal/archive/2011/10/02/support-for-ssl-tls-protocols-on-windows.aspx

to restrict the TLS versions
https://support.microsoft.com/en-gb/kb/245030
btanExec Consultant
Distinguished Expert 2018
Commented:
the iiscrypto tool is handy to surface the overall crypto used as it grab directly from the machine registry SChannel setting (which Windows depends on) https://www.nartac.com/Products/IISCrypto
- you can even use it to disable and enable as required and desired for lockdown. in fact, the Lync client (at least on 2010)  can only use TLS connections, this behavior is not configurable. http://blog.schertz.name/2010/10/lync2010-client-tls-only/?utm_source=feedbur#8230

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial