Home > SharePoint > Win7 SharePoint 2016 SSL and Office 2013

Win7 SharePoint 2016 SSL and Office 2013

Some times you have to get older clients to talk to newer servers, and this was the situation I was in recently. 2 new SharePoint 2016 Farms has been build (Pre and Prod) on Windows 2016 – same server build and same SharePoint build, both running over SSL.

From a Windows 10 client running Office 2016/365 everything was fine with Office integration on both systems, but on a Windows 7 client running Office 2013 Office integration was failing with the following error when doing anything with Office Documents on the Pre system but worked perfectly on Prod (same client)

clip_image001 

This article seemed to suggest that the issue was based in the TLS settings on the Windows servers as Windows 7 by default will only support TLS1.0.

According to IISCrypto both systems fully support TLS1.0 – but clearly something was different.

A lot of organisations are moving to newer versions of TLS and Windows 7 does has an update to allow it to work with later version of TLS, but in this instance we didn’t have time to test and release an update, so it was time to fire up Wireshark and do some tracing.

From Win 7 client opening a Word doc against Prod.

clip_image001[4]

from the same  client against Pre

clip_image001[6]

A bit hard to see but we were getting TLS1.0 Handshake Failures when using Office 2013.

We tracked the issue down to the Ciphers used at Load Balancer level – once this was updates everything worked perfectly.

Advertisements
Categories: SharePoint Tags: ,
  1. No comments yet.
  1. No trackbacks yet.

Leave a Reply

Please log in using one of these methods to post your comment:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google+ photo

You are commenting using your Google+ account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

%d bloggers like this: