+ Start a Discussion
anil Kumaranil Kumar 

How do you enable TLS 1.2 in Salesforce

Hi All,

We have few web service call outs from salesforce community portal to external system. External system has been upgraded to TLS 1.2 protocol. Now they wants us to upgrade to LS 1.2 protocol version. Kidly help me how to upgrade TLS 1.2 version in salesforce?

Thanks,
Anil Kumar
Best Answer chosen by anil Kumar
Khan AnasKhan Anas (Salesforce Developers) 
Hi Anil,

Greetings to you!

It is possible to get this upgrade to TLS 1.2 "indirectly" by upgrading your browser to the latest version. You will automatically be using it if you are using updated browsers. Also, you update your JDK to the latest version.

To check if your browser can handle TLS v1.1 and v1.2, select https://www.ssllabs.com/ssltest/viewMyClient.html to open the SSL/TLS Capabilities of Your Browser web page.

Once the page completes the test, scroll down to the Protocol Features section.
  • If Yes is displayed next to TLS 1.1 and/or TLS 1.2, your browser will continue to work as it is currently does with Talent Suite applications.

However, Salesforce is requiring an upgrade to TLS 1.2 by September, 2019, in order to align with industry best practices for security and data integrity. Around this date, Salesforce will begin disabling the TLS 1.1 encryption protocol. 

A new Critical Update Console (CRUC) setting: "Require TLS 1.2 or higher for HTTPS connections" will be made available in the upcoming weeks. You can check the critical updates from Setup -> Search Critical Updates in Quick Find Box -> Select Critical Updates.

Please refer to the below link which might help you further with the above requirement.

https://help.salesforce.com/articleView?id=000221207&type=1

I hope it helps you.

Kindly let me know if it helps you and close your query by marking it as solved so that it can help others in the future. It will help to keep this community clean.

Thanks and Regards,
Khan Anas

All Answers

Hemanth Kumar 161Hemanth Kumar 161
Article is helpfull.
Khan AnasKhan Anas (Salesforce Developers) 
Hi Anil,

Greetings to you!

It is possible to get this upgrade to TLS 1.2 "indirectly" by upgrading your browser to the latest version. You will automatically be using it if you are using updated browsers. Also, you update your JDK to the latest version.

To check if your browser can handle TLS v1.1 and v1.2, select https://www.ssllabs.com/ssltest/viewMyClient.html to open the SSL/TLS Capabilities of Your Browser web page.

Once the page completes the test, scroll down to the Protocol Features section.
  • If Yes is displayed next to TLS 1.1 and/or TLS 1.2, your browser will continue to work as it is currently does with Talent Suite applications.

However, Salesforce is requiring an upgrade to TLS 1.2 by September, 2019, in order to align with industry best practices for security and data integrity. Around this date, Salesforce will begin disabling the TLS 1.1 encryption protocol. 

A new Critical Update Console (CRUC) setting: "Require TLS 1.2 or higher for HTTPS connections" will be made available in the upcoming weeks. You can check the critical updates from Setup -> Search Critical Updates in Quick Find Box -> Select Critical Updates.

Please refer to the below link which might help you further with the above requirement.

https://help.salesforce.com/articleView?id=000221207&type=1

I hope it helps you.

Kindly let me know if it helps you and close your query by marking it as solved so that it can help others in the future. It will help to keep this community clean.

Thanks and Regards,
Khan Anas
This was selected as the best answer
anil Kumaranil Kumar
Hi Anas,

Thank you for the prompt responce :).

In the sandbox i am able see TLS 1.2 version activation details under the Critical Updates. However i could not found same settings in the production environment.  

Can we active  TLS 1.2 version by clicking Activate Hyper link which they mention beside Review. 

User-added image

Thanks,
Anil Kumar 
 
Khan AnasKhan Anas (Salesforce Developers) 
Hi Anil,

It will be available in the upcoming weeks. However, Salesforce automatically activates critical updates on the date indicated.
Yes, you can activate it. If an update has an Activate link, you can click it to test the update in your sandbox or production environment before Salesforce automatically activates it.

https://help.salesforce.com/articleView?id=cruc_overview.htm&type=5

Regards,
Khan Anas