All Collections
Remote Monitoring & Management
Deploying Agents
Checking client systems for TLS 1.2 compliance
Checking client systems for TLS 1.2 compliance
Mithra Ravikrishnan avatar
Written by Mithra Ravikrishnan
Updated over a week ago

Starting January 1, 2024, SuperOps.ai will no longer support agents that do not comply with the TLS 1.2 protocol. Client assets’ OS and browser need to be compliant with TLS 1.2 for the SuperOps.ai agent to perform optimally and for you to continue using Splashtop through the SuperOps.ai platform.

Why are we doing this?

TLS 1.2 ensures that communications through SuperOps.ai are more secure than the previous versions (TLS 1.0 and TLS 1.1). Complying with TLS 1.2 and above helps us align with industry best practices and provide the highest level of security in managing your client systems.

How do you check if your client’s OS is compliant with TLS 1.2 or above?

Systems using Windows 8 and above have TLS 1.2 enabled by default. SuperOps.ai is supported on Windows 8.1 and above, so your client systems will likely be TLS 1.2-compliant already. You can check OS versions and the corresponding TLS version support in the table given on this page:

We’ve also given the whole table in an appendix at the end of this page, should you want an immediate reference.

If you need further verification, you can run the script below on your client systems. The output displays whether TLS 1.2 is supported on the system or not.

function CreateDirectory{

param (

[string]$DirectoryPath,

[string]$InstallerPath

)

try {

If(!(Test-path -PathType container "$DirectoryPath")){

Write-Host "Creating Folder $DirectoryPath"

New-Item -ItemType Directory -Path "$DirectoryPath"

}

Remove-Item -Path $InstallerPath -ErrorAction SilentlyContinue

}catch {

write-Host "Error in creating Directory $DirectoryPath"

write-Host $_.Exception.Message

}

}

function DownloadInstaller{

param(

[string]$DownloadURL,

[string]$DownloadPath

)

try{

write-Host "Downloading using invoke-WebRequest"

invoke-WebRequest -Uri "$DownloadURL" -Outfile "$DownloadPath";

return $true;

}catch{

if($_.Exception.Message.Contains("The term 'invoke-WebRequest' is not recognized as the name of a cmdlet")){

try{

Write-Host "Downloading using System.Net.WebClient";

(New-Object System.Net.WebClient).DownloadFile($DownloadURL,$DownloadPath);

return $true;

}catch{

Write-Host "Error while downloading using System.Net.WebClient"

Write-Host $_.Exception.Message

return $false;

}

}else{

Write-Host "Error while downloading"

Write-Host $_.Exception.Message

return $false;

}

}

}

$agenturl="https://superops-winstaller-tls-check.s3.us-east-2.amazonaws.com/test.txt"

$installerDir = Join-Path -Path $env:TMP -ChildPath "tlscheck"

$installerPath = Join-Path -Path $installerDir -ChildPath "test.txt"

CreateDirectory -DirectoryPath $installerDir -InstallerPath $installerPath

# Set TLS 1.2 as the security protocol

#-----------

[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12

$protocolSupport = [System.Net.ServicePointManager]::SecurityProtocol -band [System.Net.SecurityProtocolType]::Tls12

if ($protocolSupport -eq [System.Net.SecurityProtocolType]::Tls12) {

Write-Host "TLS 1.2 is supported."

} else {

Write-Host "TLS 1.2 is not supported."

}

CreateDirectory -DirectoryPath $installerDir -InstallerPath $installerPath

[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12

if(DownloadInstaller -DownloadURL $agenturl -DownloadPath $installerpath){

Write-Host "Downloaded with TLS 1.2 is supported"

}else{

Write-Host "Downloaded with TLS 1.2 failed"

}

This is the output you’ll see if TLS 1.2 is supported on the system

How do you check if your client’s browser is compliant with TLS 1.2 or above?

The table below outlines the minimum browser versions that support TLS 1.2:

Browser

TLS 1.2 Supported

(Not enabled by default)

Enabled by default

Internet Explorer

Version 8

Version 11

Microsoft Edge

All Versions

Google Chrome

Version 29

Version 29

Mozilla Firefox

Version 23

Version 27

Safari

Version 7

Version 7

How to enable TLS protocols on older browsers

If the client is running an older browser, they can enable the browser’s TLS 1.2 protocol with the following steps:

Microsoft Internet Explorer

  1. Open Internet Explorer

  2. From the menu bar, click Tools > Internet Options > Advanced tab

  3. Scroll down to Security category, manually check the option box for Use TLS 1.2

  4. Click OK

  5. Close the browser and restart Internet Explorer

Google Chrome

Connections that go through Chrome are automatically negotiated at the highest grade.

If they are using Google Chrome version 29 or above, TLS 1.2 is automatically enabled.

Mozilla Firefox

  1. Open Firefox

  2. In the address bar, type about:config and press Enter

  3. In the Search field, enter tls. Find and double-click the entry for security.tls.version.max

  4. Set the integer value to 3 to force the protocol of TLS 1.3

  5. Click OK

  6. Close the browser and restart Mozilla Firefox

Appendix

Did this answer your question?