Skip to content

How to Enable TLS 1.1 and 1.2 in Outlook on Windows 7

This guide provides the steps to enable TLS 1.1 and 1.2 in Outlook on a Windows 7 system. Enabling these protocols ensures secure communication between Outlook and mail servers that require TLS 1.1 or 1.2.

Disclaimer

Please be advised that we do not provide official technical support for this setup. It is offered as a courtesy, and we are unable to assist with any issues, troubleshooting, or complications that may arise from its use.

Prerequisites

Before proceeding, ensure you have:

  • Administrative rights on the Windows 7 machine.
  • Windows 7 Service Pack 1 (SP1) installed.
  • Microsoft Outlook installed.

Steps to Enable TLS 1.1 and 1.2

1. Update Windows 7

  1. Ensure that Windows 7 is fully updated:
  2. Go to Control Panel > Windows Update.
  3. Check for updates and install any available updates, especially security updates and updates related to TLS support.

2. Update Internet Explorer to Version 11

  1. TLS settings in Windows are controlled by Internet Explorer, so ensure you have the latest version:
  2. Download and install Internet Explorer 11.
  3. Restart your computer after installation.

3. Modify the Windows Registry

Downloadable Patch File for Step 3 & 4

If you prefer to manually modify your registry, you can follow the procedure outlined below. Alternatively, you can download and run the prepared patch file on your computer.

Please download the attachment by clicking the link below:

Download Attachment

Note: Ensure that you have the necessary permissions to download and open the file. If you encounter any issues, please check your browser settings or contact your system administrator.

  1. Press Win + R to open the Run dialog.
  2. Type regedit and press Enter to open the Registry Editor.

  3. Navigate to the following key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\WinHttp

  4. Right-click on the WinHttp folder, select New > DWORD (32-bit) Value, and name it DefaultSecureProtocols.

  5. Double-click on DefaultSecureProtocols and set the value to 0x00000A00 to enable both TLS 1.1 and 1.2.
  6. Click OK to save the changes.

4. Modify the Protocols in the Registry

  1. Navigate to the following key: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols

  2. Create two new keys under the Protocols key: TLS 1.1 and TLS 1.2.

  3. For each protocol (TLS 1.1 and TLS 1.2), create two new keys: Client and Server.
  4. Under each of the Client and Server keys, create a new DWORD (32-bit) Value named Enabled and set its value to 1.
  5. Create another DWORD (32-bit) Value named DisabledByDefault and set its value to 0.

5. Enable TLS 1.1 and 1.2 in Internet Options

  1. Open Control Panel and go to Internet Options.
  2. Click on the Advanced tab.
  3. Scroll down to the Security section.
  4. Check the boxes for Use TLS 1.1 and Use TLS 1.2.
  5. Click Apply and then OK.

6. Restart the Computer

  1. After making these changes, restart your computer to ensure the settings take effect.

Verifying the Configuration

  1. Open Outlook and test your email connections.
  2. If you encounter any issues, ensure that your email server supports TLS 1.1 or 1.2 and that all settings are correctly configured.

Troubleshooting

  • No TLS 1.1 or 1.2 Options in Internet Options: Ensure that all Windows updates are installed and that you have the latest version of Internet Explorer.
  • Registry Changes Not Taking Effect: Double-check that you have followed all registry modification steps and that you have administrative rights on the machine.

By following these steps, you can enable TLS 1.1 and 1.2 in Outlook on a Windows 7 machine, ensuring secure email communication.