TLS

Is Your On-Premise Exchange Server Ready for March 22nd 2026?

by

If you run an on-premises Exchange Server or any Windows-based SMTP relay that sends mail to or receives mail from Exchange Online, then you might have a hard deadline coming up: March 22, 2026. Miss it, and you can risk breaking your mail flow, if the Root Certificates used by Exchange is not updated. What Is Changing Microsoft Exchange Online is switching its TLS certificates to the DigiCert Global Root G2 certificate authority. This is …

Read more

How to Setup IIS for SSL Perfect Forward Secrecy and TLS 1.2

by

An often overseen action is to lock down Internet Information Services. You can increases security of SSL connections to your server by disabling insecure SSL2 and SSL3 and all insecure and weak ciphers that a browser may fall-back, too. I recently found a great PowerShell script, which can help implement the current best practices for IIS in a quick way. This PowerShell script setups your Microsoft Internet Information Server 7.5/8.0/8.5/10 (IIS) on Windows 2008R2/2012/2012R2/2016 to support …

Read more