Instructions
Due to known vulnerabilities in older SSL/TLS protocols, administrators are looking to limit inbound connections to StorageZone Controllers to TLS v1.2. The following steps provide guidance on setting up your StorageZone Controller to accept TLS v1.2 connections as well as steps to configure ShareFile clients to communicate over TLS v1.2
Support is available as ofStorageZones Controller v4.0or higher. Validation was performed with an external-facing NetScaler configured with TLS v1.2 only for in-bound connections to the ContentSwitching vServer.
If protocols earlier than TLS v1.2 are disabled on the StorageZones Controller, all client software components that interact with the StorageZone must also support TLS v1.2. Windows sync clients require Microsoft .NET Framework 4.5.2 and registry updates to support TLS v1.2. Mac sync clients do not support TLSv1.2. See below for details on how to configure Windows sync machines to use TLS v1.2.
Setup -NetScaler Configuration
At the Content Switch Virtual Server, modify SSL Parameters and enable TLS v1.2. You can also disable all other protocols.
ShareFile Windows Client Configuration
要求:- .NET 4.5.2 or higher
- The following registry key(s) must be applied to your Windows client operating system in order for the .NET applications to communicate over TLS v1.2 outbound. A client OS restart is required
IMPORTANT: The following registry setting allows .NET 4.0 applications to use TLS v1.2. This setting will apply to all .NET 4 applications installed, so please use caution when applying to ensure there will be no impacts to any other applications.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v4.0.30319]
SchUseStrongCrypto=dword:00000001
For 64-Bit systems, also include:
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\v4.0.30319]
SchUseStrongCrypto=dword:00000001
Tested Windows Operating Systems
- Windows 7 32-bit/64-bit
- Windows 8.1 32-bit/64-bit
- Windows 10 32-bit/64-bit
Tested Windows Clients
- ShareFile Sync Client for Windows
- ShareFile Outlook Plugin
- ShareFile Desktop App
- ShareFile Drive Mapper
- ShareFile PowerShell client
Tested ShareFile Mobile Clients
- iOS 8/9
- Windows 10 Metro
- Android 4.4.2, 5.0.2, 6
Tested Web Browsers
- IE 10 / 11 / Edge
- Chrome
- Firefox
- Safari
NetScaler Tested
- NetScaler 11.0 63.16
Not Supported
- ShareFile Sync for Mac
- Windows 8.1 Metro
- SFCLI