TLSv1.2 connections

TLS negotiation

CIC, its subsystems, and client applications support network connections using Transport Layer Security (TLS) versions 1.0, 1.1, and 1.2. By default, CIC 2017 R2 uses TLS v1.2. CIC negotiates to previous TLS versions for backwards compatibility with older CIC components.

Note:
A TLS 1.2 connection to SQL Server will be available in a future release due to the requirement of SQL Server Native Client 11.0 support.

Disabling older TLS versions

Using a new ININ_SSL_MIN_PROTOCOL_VERSION environment variable on the CIC server, you can control the minimum version of TLS network connections that the CIC server supports.

Supported values:

• TLSv1.2

Configure this environment variable only after updating all CIC subsystems to the latest version. Otherwise, setting TLSv1.2 as the minimum version prohibits network connections with older CIC subsystems. For more information, see the Security Features Technical Reference (Set the minimum version of TLS for CIC section) for more information about using TLS 1.2.

Director updated to latest CIC release

Interaction Director is now included as part of the CIC release cycle and supports TLSv1.2 network connections.