How to enable TLS 1.2 protocol on the Windows FglAM and Hosts (4310066)

How can TLS 1.2 protocol be enabled on the Foglight Agent Manager (client) server and host running Windows?

Option 1: Verify TLS 1.2 Using Internet Options

1. Open Control Panel.
2. Navigate to Internet Options.
3. Select the Advanced tab.
4. Scroll to the Security section.
5. Verify that Use TLS 1.2 is selected.
6. If it is not selected:
   • Enable Use TLS 1.2.
   • Click Apply and OK.
7. Restart any affected applications or services.

Option 2: Verify TLS 1.2 Through the Windows Registry

1. Open Registry Editor (regedit.exe).
2. Navigate to:

   HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols

3. Verify that the following registry keys exist:

   TLS 1.2
   ├── Client
   └── Server

4. Under both Client and Server, verify the following values:

   Enabled = 1
   DisabledByDefault = 0

5. If the keys or values do not exist, create them with the values shown above.
6. Restart the system to apply the changes.

Notes

• Modern Windows desktop and server operating systems support TLS 1.2.
• A system reboot is recommended after modifying Schannel registry settings.
• Some applications manage TLS settings independently and may require separate configuration.
• Support does not provide support for problems that arise from improper modification of the registry. The Windows registry contains information critical to your computer and applications. Make sure you back up the registry before modifying it. For more information on the Windows Registry Editor and how to back up  and restore it, refer to Microsoft Article ID 256986 “Description of the Microsoft Windows registry” at  Microsoft Support. 

IMPORTANT: Microsoft recommends that you restart the computers on which you have modified the registry settings.

Windows 2016 platforms uses TLS 1.2 security protocol by default. Nevertheless, this protocol is not enabled in earlier platforms such as Windows 2008 etc.

For more information refer to the following article:
https://support.microsoft.com/en-in/help/3140245/update-to-enable-tls-1-1-and-tls-1-2-as-default-secure-protocols-in-wi