How to enable TLS 1.2 for communication between the Enterprise Vault components and the SQL server

Description

Enterprise Vault 12.4.1 and later support the TLS 1.2 protocol for communication between the Enterprise Vault components and the SQL server. To support TLS 1.2, the Microsoft OLE DB Provider for SQL Server (SQLOLEDB) is replaced with the Microsoft OLE DB Driver for SQL Server (MSOLEDBSQL).

This document provides information about enabling TLS 1.2 on the computers that host the Enterprise Vault server.

This document applies to Enterprise Vault 12.4.1 and later.

Note: Before you upgrade to Enterprise Vault 12.4.1, ensure that you install MSOLEDBSQL on the computers that host the Enterprise Vault server. You can download the installer package file from the following webpage:
https://www.microsoft.com/en-us/download/details.aspx?id=56730

Prerequisites

See the following article to ensure that you have installed and configured the correct prerequisite software to enable TLS 1.2:
https://support.microsoft.com/en-us/help/3135244/tls-1-2-support-for-microsoft-sql-server

Enable TLS 1.2

To enable TLS 1.2 you need to update the following registry settings on the computers that host the Enterprise Vault server:

• [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Client]” Enabled"=dword:00000001” DisabledByDefault"=dword:00000000
• [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Server]” Enabled"=dword:00000001” DisabledByDefault"=dword:00000000

IMPORTANT: Microsoft recommends that you restart the computer on which you have modified the registry settings.

Warning: Incorrect use of the Windows registry editor may prevent the operating system from functioning properly.  Great care should be taken when making changes to a Windows registry.  Registry modifications should only be carried-out by persons experienced in the use of the registry editor application.  It is also recommended that a complete backup of the registry and workstation / server be made prior to making any registry changes. 

For more information refer to the following article:
https://support.microsoft.com/en-in/help/3140245/update-to-enable-tls-1-1-and-tls-1-2-as-default-secure-protocols-in-wi