Azure AD kurulumu için TLS 1.2 gereklidir. Bazen sunucularda TLS’in bu versionu açık olmayabilir.
Kuruluma devam edebilmek için aşağıdaki script ile powershell’de TLS ayarlarının güncellenmesi gerekmektedir.
New-Item 'HKLM:\SOFTWARE\WoW6432Node\Microsoft\.NETFramework\v4.0.30319' -Force; Write-Host -ForegroundColor Green "HKLM:\SOFTWARE\WoW6432Node\Microsoft\.NETFramework\v4.0.30319 basariyla olusturuldu." New-ItemProperty -path 'HKLM:\SOFTWARE\WoW6432Node\Microsoft\.NETFramework\v4.0.30319' -name 'SystemDefaultTlsVersions' -value '1' -PropertyType 'DWord' -Force; Write-Host -ForegroundColor Green "'SystemDefaultTlsVersions' basariyla degistirildi." New-ItemProperty -path 'HKLM:\SOFTWARE\WoW6432Node\Microsoft\.NETFramework\v4.0.30319' -name 'SchUseStrongCrypto' -value '1' -PropertyType 'DWord' -Force; Write-Host -ForegroundColor Green "'SchUseStrongCrypto' basariyla degistirildi." New-Item 'HKLM:\SOFTWARE\Microsoft\.NETFramework\v4.0.30319' -Force; Write-Host -ForegroundColor Green "HKLM:\SOFTWARE\Microsoft\.NETFramework\v4.0.30319 basariyla olusturuldu." New-ItemProperty -path 'HKLM:\SOFTWARE\Microsoft\.NETFramework\v4.0.30319' -name 'SystemDefaultTlsVersions' -value '1' -PropertyType 'DWord' -Force; Write-Host -ForegroundColor Green "'SystemDefaultTlsVersions' basariyla degistirildi." New-ItemProperty -path 'HKLM:\SOFTWARE\Microsoft\.NETFramework\v4.0.30319' -name 'SchUseStrongCrypto' -value '1' -PropertyType 'DWord' -Force; Write-Host -ForegroundColor Green "'SchUseStrongCrypto' basariyla degistirildi." New-Item 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Server' -Force; Write-Host -ForegroundColor Green "HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Server basariyla olusturuldu." New-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Server' -name 'Enabled' -value '1' -PropertyType 'DWord'; Write-Host -ForegroundColor Green "'Enabled' basariyla degistirildi." New-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Server' -name 'DisabledByDefault' -value 0 -PropertyType 'DWord' -Force; Write-Host -ForegroundColor Green "'DisabledByDefault' basariyla degistirildi." New-Item 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Client' -Force; Write-Host -ForegroundColor Green "HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Client basariyla olusturuldu." New-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Client' -name 'Enabled' -value '1' -PropertyType 'DWord' -Force; Write-Host -ForegroundColor Green "'Enabled' basariyla degistirildi." New-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Client' -name 'DisabledByDefault' -value 0 -PropertyType 'DWord' -Force; Write-Host -ForegroundColor Green "'DisabledByDefault' basariyla degistirildi." Write-Host -ForegroundColor Green "Tum ayarlamalar basariyla degistirildi."