PeopleSync Knowledge Base
PeopleSync Knowledge Base
Breadcrumbs

Exchange Folder Agent fails when Exchange restricted to TLS 1.2

Problem

After disabling SSL/TLS protocols older than TLS 1.2 on Exchange Server, Exchange Folder Agent fails with the following error message:

SSL Provider: An existing connection was forcibly closed by the remote host.

SSL Provider: An existing connection was forcibly closed by the remote host.

Solution

This is caused by TLS 1.2 not being enabled on the server where the PeopleSync Backend is installed.

To resolve this issue, please upgrade PeopleSync Frontend and Backend to version 21.2 or higher.
PeopleSync 21.2 uses .net Framework 4.7.2, which supports TLS 1.2 without further registry changes.


For further information about TLS 1.2 in .net Framework applications, please see:


Only if you are unable to upgrade to 21.2 or higher, the following applies:

  1. Upgrade PeopleSync Frontend and Backend to version 20.3.

  2. On the PeopleSync Backend server, enable TLS 1.2 as client and server protocol by setting the following registry settings:

    C#
    Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Client]
"DisabledByDefault"=dword:00000000
"Enabled"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Server]
"DisabledByDefault"=dword:00000000
"Enabled"=dword:00000001

  3. On the PeopleSync Backend server, enable TLS 1.2 for .net applications by setting the following registry settings:

    C#
    Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727]
"SystemDefaultTlsVersions"=dword:00000001
"SchUseStrongCrypto"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v4.0.30319]
"SystemDefaultTlsVersions"=dword:00000001
"SchUseStrongCrypto"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727]
"SystemDefaultTlsVersions"=dword:00000001
"SchUseStrongCrypto"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v4.0.30319]
"SystemDefaultTlsVersions"=dword:00000001
"SchUseStrongCrypto"=dword:00000001