Starting with version 7.0.1 build 6073, you can now install CA in a TLS 1.2 only environment without having to use TLS 1.0 for the setup.
WORKAROUND for versions prior to 7.0.1 build 6073:
The Change Auditor coordinator installer requires TLS 1.0 be enabled for installation to occur. TLS 1.0 Client (coordinator-side) and TLS 1.0 Server (SQL Server) as of Change Auditor 7.0 will need to be allowed at least until coordinator is installed.
Once the coordinator is installed, TLS 1.2 will work and TLS 1.0 can be disabled as if required.