TLS 1.2 Preparations Scanner

Question

I have to insure the following systems are fully prepared for TLS 1.2 before I do the SQL Server upgrades.

Windows Server 2008 Standard
Windows Server 2012 R2 Standard
Windows 7 Professional SP1
Windows Server 2008 R2 Standard SP1
Windows Server 2008 R2 Enterprise SP1

Is there some type of scanner or tool I can run that can tell me if all of the required patches have been installed,
and if not, tell me what patches need to be implemented?

Answer 1

I am getting ready to start a project that will include SQL Server 2005 through SQL Server 2014. I will be implementing TLS 1.2 in an environment that includes SQL Linked Servers. I will also have to be sure the OS/NOS hosting SQL Server is prepared and ready for TLS 1.2.

I have some questions already, and sure there will be more.  What forum should I be using for questions and research?

Answer 2

For SQL Server related ones, this is good forum to share your queries.

Please share. If it is something related to web or sharepoint security configuration on web browser then there is different forum.

For sharepoint forum: please reach out to: https://social.msdn.microsoft.com/Forums/sharepoint/en-US/home?category=sharepoint

For web forum: http://forums.iis.net/ or https://social.technet.microsoft.com/Forums/office/en-US/360dc33f-0158-4bc8-aa88-093e42168e56/please-submit-iis-related-issues-to-the-official-microsoft-iis-forum-at-httpforumsiisnet?forum=windowsserver2008r2webtechnologies

Please check your requirement accordingly and help.

---

Santosh Singh

Answer 3

I have the following SQL Server Express servers that need to be upgrade to SQL Server Express 2008, or hopefully
SQL Server 2014 Express if possible.

SQL Server 2005 Express, version 9.00.5057.00, SP4
SQL Server 2012 Express, version 11.0.6020.0, SP3
SQL Server 2012 Express, version 11.0.6020.0, SP3
SQL Server 2012 Express, version 11.0.6020.0, SP3
SQL Server 2005 Express, version 9.00.5000.00, SP4
SQL Server 2005 Express, version 9.00.5069.00, SP4
SQL Server 2005 Express, version 9.00.5000.00, SP4
SQL Server 2005 Express, version 9.00.5000.00, SP4
SQL Server 2012 Express, version 11.0.5058.0, SP2
SQL Server 2005 Express, version 9.00.5069.00, SP4
SQL Server 2012 Express, version 11.0.5343.0, SP2

Keep in mind, these are all production servers that communicate with a SQL Server 2014 server via a
Linked Server connection.  The goal here is to make sure all SQL Servers are TLS 1.2 compliant.

So, obviously, the upgrade needs to be bullet proof so when the servers are upgraded, no production
data, settings or configurations are lost.

Suggestions please?

Answer 4

You may be interested in the KB article TLS 1.2 support for Microsoft SQL Server https://support.microsoft.com/en-us/kb/3135244. It lists the builds that support TLS 1.2 back through SQL Server 2008.

---

Rick Byham, Microsoft, SQL Server Books Online, Implies no warranty

Answer 5

Thanks Rick!  I have already been through that article.  It is good, just trying to find a less time consuming method of implementing the steps in the article.